last executing test programs: 46.254154286s ago: executing program 4 (id=423): r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f0000000080), 0x0, &(0x7f00000002c0)="5bdb7bcf936f716dd5bc3617b83f3db771e8b5e054c0ace25495116569fea1ae9dff3a6bdaf56bdff3618879919785d5bbd1d6d155e55c924d8cf80f5ef7f3511910c193b32428d4582e4535c078e568697ce04c1eaeb1a2a77e2e02fe9ab18f027c08fd47ec3c4f6f562be467dca14ee3c278b424e20c3e6d982c180fd38262d4c972bfced630dc3ceefd1daae6dfe9455d92e9319edeb9ace1210eb09969f96ead3a404d95f3bee87723c8a6c20af7eccfccc261dfe580c23e6f3aa1cb71d5", 0xc0, 0xfffffffffffffffb) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x64142, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000540)={0x0, 0x0, 0x13}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000200)) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATu(r4, &(0x7f0000000140)=ANY=[], 0x5f) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x84000176) r6 = add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000140)="9c", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r0, r1, r6}, &(0x7f0000000400)=""/126, 0x7e, 0x0) 44.002337497s ago: executing program 0 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r6}) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000caaffb), 0x0) socket$key(0xf, 0x3, 0x2) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(0x0, &(0x7f0000fa4000/0x4000)=nil, 0x6000) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) r8 = dup(0xffffffffffffffff) write$cgroup_pid(r8, &(0x7f0000000000)=0xffffffffffffffff, 0x12) mmap(&(0x7f0000312000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) 43.87532987s ago: executing program 4 (id=430): socket(0x0, 0x0, 0x0) r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) 42.459286012s ago: executing program 0 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, @in=@empty, 0x0, 0x0, 0x4e23, 0x0, 0xa}, {}, {0x0, 0x4}, 0x0, 0x6e6bb7, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x200, 0x32}, 0x2, @in=@multicast1, 0x0, 0x1, 0x3}}, 0xe8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a80)="800037bbfa9b6d40", 0x8, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x3, 0xffffffffffffffff}) 42.339444017s ago: executing program 4 (id=434): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x88, &(0x7f0000000000), &(0x7f0000000240)=0x4) 41.414848098s ago: executing program 0 (id=435): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) io_setup(0x3ff, &(0x7f0000000500)) r2 = io_uring_setup(0x77c, &(0x7f0000000180)) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x101) r4 = socket$inet_dccp(0x2, 0x6, 0x0) close(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="4ce988a2ee17a65dc31310"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c0"], 0x398}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x8001000, 0x8, '9P2000.u'}, 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r10, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xe3d}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}}) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) close_range(r2, 0xffffffffffffffff, 0x0) 41.275427131s ago: executing program 4 (id=437): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000019e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@can_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "9e0f5d78b31ebefd"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffd}}]}, 0x34}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x14, r2, 0x215}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 40.164105523s ago: executing program 4 (id=441): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 39.848917073s ago: executing program 0 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x6, 0x7f, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), 0x0, 0x7, r0}, 0x38) unshare(0x24020400) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000000140)="bf063c939dfe4becdc8559b93a7ea78acad5192927ebcac8907b77f4347bc6d7b1b1c8cb176491e114fb90ce", &(0x7f00000002c0)=""/215}, 0x20) 39.575828496s ago: executing program 4 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, @in=@empty, 0x0, 0x0, 0x4e23, 0x0, 0xa}, {}, {0x0, 0x4}, 0x0, 0x6e6bb7, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x200, 0x32}, 0x2, @in=@multicast1, 0x0, 0x1, 0x3}}, 0xe8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a80)="800037bbfa9b6d40", 0x8, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x3, 0xffffffffffffffff}) 39.568901736s ago: executing program 3 (id=446): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x2201, &(0x7f0000000000)) 39.323115302s ago: executing program 0 (id=447): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0x9}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 39.01637652s ago: executing program 3 (id=449): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x80010, r1, 0xff) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="e62f450e88f3777484f6f351baafe8a6bc801e16fa8fbbb251f58ef636dcad3fdeefc9714bd9bf796067fcf52c8167e340", @ANYBLOB="49422f81ec1382d6a85dc5eed6f9b2c2d0f7990ce4c7c5d1", @ANYRES8, @ANYRESOCT, @ANYRES32=r0, @ANYRES16, @ANYRES16], 0xffffffffffffffcf) socket(0x15, 0x3, 0x7f) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x0, 0x4, [0xd398, 0xa, 0x80, 0x20]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x7680, 0x1, 0x0, 0x4, 0x4630, 0x3, 0x80000001, 0x10000, r2}, &(0x7f0000000200)=0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtaction={0xe4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xd0, 0x1, [@m_ife={0xcc, 0x1, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffd, 0x0, 0x0, 0xffffffff}, 0x1}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0xc9a2}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfffe}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe4}}, 0x0) 38.83889827s ago: executing program 1 (id=450): mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002180)=""/4089, 0xfffffffffffffd79) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x186a1}) sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0x40000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x26102, 0xa0) linkat(r0, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000280)='./bus\x00', 0x8ffcaea8338f1dd1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)}], 0x1}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, "6b8ee1", 0x1}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x0, 0x0, 0x52424752, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x800, 0x8}]}}) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f00000001c0)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2160}], 0x1, 0x0, 0x0, 0x0) 38.586460551s ago: executing program 3 (id=451): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000019e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@can_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "9e0f5d78b31ebefd"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffd}}]}, 0x34}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x14, r2, 0x215}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 37.39292353s ago: executing program 0 (id=452): mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002180)=""/4089, 0xfffffffffffffd79) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x186a1}) sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0x40000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x26102, 0xa0) linkat(r0, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000280)='./bus\x00', 0x8ffcaea8338f1dd1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)}], 0x1}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, "6b8ee1", 0x1}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x0, 0x0, 0x52424752, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x800, 0x8}]}}) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f00000001c0)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2160}], 0x1, 0x0, 0x0, 0x0) 37.090126589s ago: executing program 3 (id=454): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0xae03, 0x9a) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x185}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 34.33188297s ago: executing program 3 (id=456): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 34.329460809s ago: executing program 1 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x6, 0x7f, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), 0x0, 0x7, r0}, 0x38) unshare(0x24020400) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000000140)="bf063c939dfe4becdc8559b93a7ea78acad5192927ebcac8907b77f4347bc6d7b1b1c8cb176491e114fb90ce", &(0x7f00000002c0)=""/215}, 0x20) 33.728649815s ago: executing program 3 (id=459): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x2201, &(0x7f0000000000)) 33.727577126s ago: executing program 1 (id=460): syz_clone3(0x0, 0x0) 33.295058304s ago: executing program 1 (id=461): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x80010, r1, 0xff) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="e62f450e88f3777484f6f351baafe8a6bc801e16fa8fbbb251f58ef636dcad3fdeefc9714bd9bf796067fcf52c8167e340", @ANYBLOB="49422f81ec1382d6a85dc5eed6f9b2c2d0f7990ce4c7c5d1", @ANYRES8, @ANYRESOCT, @ANYRES32=r0, @ANYRES16, @ANYRES16], 0xffffffffffffffcf) socket(0x15, 0x3, 0x7f) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x0, 0x4, [0xd398, 0xa, 0x80, 0x20]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x7680, 0x1, 0x0, 0x4, 0x4630, 0x3, 0x80000001, 0x10000, r2}, &(0x7f0000000200)=0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtaction={0xe4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xd0, 0x1, [@m_ife={0xcc, 0x1, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffd, 0x0, 0x0, 0xffffffff}, 0x1}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0xc9a2}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfffe}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe4}}, 0x0) 32.859159083s ago: executing program 1 (id=463): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0x9}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 31.204285804s ago: executing program 1 (id=465): syz_emit_ethernet(0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="000000a4a9ca1100045fe18773270c4b7fb0d4255b141c6fc296996f848bffedf698209bef27eb34e414145c09cb119e6f74832e0eca60dd553c6fb70f9d9c6a0a2a5f3c6e302d3dc3c8aa264bc52ce9742ec90514162bc85c29101a0ddde5f4fce9ed0c4ae7cd7959ba192b5db122cf8e913832c17918812d7ffea407"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05011c82430036200000"], 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x8000000000000001}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000080), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000600)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f907, 0x0, '\x00', @value64=0x9}}) unlinkat(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r5 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000002ac0)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r5, 0x0, 0x0) 6.083020898s ago: executing program 2 (id=498): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file5\x00', 0x82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000a00), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000800)={&(0x7f0000000080)={0x2, 0x1, @local}, 0x10, 0x0, 0x0, &(0x7f0000001f00)=[@rdma_dest={0x18, 0x114, 0x2, {0x4, 0x200}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001e80)}}], 0x60, 0x20040080}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000003c0)=0xfffffffe) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110ce1e0000a43f7de0a353a0250000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x22}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file5\x00', &(0x7f00000000c0), 0x80001, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) 5.157678485s ago: executing program 2 (id=499): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a090000001fffffff000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x42001, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0xa00004, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @adiantum, 0x2, '\x00', @b}) chdir(&(0x7f0000000140)='./bus\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc}, 0x73) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000002980)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRES32=r3, @ANYRESDEC=r2, @ANYRESOCT=r3, @ANYRES32=r2, @ANYRESDEC=r4, @ANYBLOB="6d4dec049d90122e7cd714f55634dfc4e46a3881eb78b7561411392113bd5ba1057f5381fb8b0290037175748a8f74510aef6d1035ae0e496cde46a64f973e2a0f6a17aed4e90d57f32437fc15d1c51daf02252d460b3e49e9debde07c610d15471760bea05c9631f70f06421a9aec191fd4ece940739525765c29877195b2e2b0a1d98bfbbfd4b6dff7cbdbdb2b2854fc313213733e053901f05029e7ed582d65896578935208c3499303db41f41849f09f67204e1a023ae083955d24e8b6db016a2ab7c91e547220e7ef3495d6e9423c654f12602554c94f5cb1d166e7a34e3069a2afcefbd4b8a0a0386176e4a983b0a0cc12dea63e80938c84bf2093073904574a1b26b537256d9e92321055fa4843297caa73e162d4dde4066aae8bd83d94123e353f6db1171f4873fd96f8fd4019f2f72e12c21abec909c841c5b1c2fe7e9f4a8ca634675f994d80a9a134aaf85617012701ab882d7f1574781113208141ec8decc6b52d88deb8cbce8457608427c23e155b4602161dfcef1a0913d228a84c260dbe4c68847d6a6c9cf30e8715ac8663c010e88b770cd20bb0d04bd71ff7d282ec54047fd6f6609ac3f7395d884b081ec3100e01c485590767d298121967ab5ca829d6cdb67af0165ad40ae8fb10242ea8d46141d0ad83dd70cbfcd4eab64770d37f31a2324bcb3fd0034e323df105efc98db7bb16c6ed707b33197b9c85d7d4c01bd199e0f671a6ce8d248be8caa4a181ed815d27942a64d6ca5ba6a1f8a46830c7c9cbfbf4876b6c41097de89b1bc8bb2b925b30f414fcfbce8c5b2060834e310226698cbb645023e38cc6a8ce693beafd9dfe3a4dc7c0ef4397361845421c9eb813d90404930bcbacf0d805ec7a6e78647e0b419a18dade8be0f866047b4439a15ed7058793717aa97d65dd18155d5bbbcd96d462c410bc3331399680c33437a91e407f9b43cf2081966986221cffc9f7924d69b4b3411725054ea5a0acc6bf1fa740f9d48b9b2101bfb132ee53959d1bbefb4313a47887f086ec999de9af2a68a81821c7795fb89bf351d11ce85be312846ba3229bf527be5b7b97c7567e821c967b05a9c9c8b16f4b626c3becf723da1d0b79638ccfcab743008d53f45b6a9f41f47e0e845ff9acb39de30648b6c8551b931b57a659d153e458ae523dca96b7ff4bfbd12c7572e0780f0cc12c952cd841a7fc183f2371b7ebc5ca001985629f35c36cd9dffad1443ee07a42c1ed8f801ae7b7e80bfeba56852e6c182ab0ade515952a8a0d1570d689211258fcaa56fcbc1ca00f50d4362b6c7ce47d63a20390232d3022e36db2f1de2990ae81eb35e3324bbf9510bbe134a218aa72af08c67e251b2c228081c56e858a7668dec1220621bd5ef6c3a6a535d4e8597e146154e9844379ae80406b96779c981f00aac012f41f24f3d2293004731348a39ed5b0e7915b6104bd5fed611be4c79fe51a8e911e5a005eb1319b4a8265c918989421f9a7d4866979e7a3d5a03e10b2819d2fcce111a102ecf42bf6809e542b761b35f9f74ddee797765c1f862149b44107584e731511e941a8a88c5c1494e396ecb1fe71219e6ebf0eb09543d4906fa19a72e4fd5d57973eb5c42cebdfd81eaaf2b4594c15dc3e53773fc4d46ec988e0e6db3f40468a3f8609e3fc32aa8195a72dac7c6549d8056074b8c3f2154b4db94da0a18e5d7af8e3d2b04a27f76fd3ca20a349bd365053a1db68d10ca80525e0276c448967b544fc5e0da566eb8ff1ac186380dd2745f1673e50239bb2006fdb701d218059a53dbf3c749cd00e1d5c543754df5274ba68c3f2abc66df93664a367cd4235fa101545d484f2b0c0847366a53935d1172e8cfad3325bfbb4531dad35b0dff5ebe72ae101d729c139dbfa62ac06d7e502d91a61a58f1f4751bb3d865a2eba649b707adcbf34b89b1de8a032c423efca78bfdab2f317f4efc85081dbb9c6cf09ea852a3d8ac5f396d02785ca0c3ab4d87c6cdcf6386278cacee520d47247cfec686d829725cb241c82c00752779eda8a3c17b7b5f9e95c0c3e6bad2bd406ee2461611728d12ba488bc1564d21bedd564fb375af2b417ee2aa13931c05aa1be31741f5b525b32ed0079c130d58e0d82dab4f1c3596c3596c679448b9b0214209c7e3696c69d69bc9f7f2f6311df00404fb07c89aa722d53c661bc9f478a1b862b1209cb23a4264edf186ce56c69e5f25e611d90970b420a7d2628633588ab5bf32f0df2329f0807435532677f011f34226e9a686b4d984fc65a59dba422befaf709f6ab4491a9033390f459123641bf15c69f2ddac920509c63bdcebac1554149cad7700b4e3d9a59b9e0e816fcb36ea38f54ff12e05f6532a782a922fad81bc67a7e58d0212ee2161ef95c3c0a6c3f1dcb4f05f9f34451456537020eabc611f09c26595f5d864571a0210199dcd2770fc2cf2025d9676e78192bb6fe45ffeb33bc92750fb6e002cd03c0e42375b3eed40eb373d3921f065bc901a116b0ce4dc964f378cc3d696741480eecb9487f7a697583960a7e615cd1eacce8b1b1808f9ec9a85f5b5abc554a353487c0ebd4d8bd7b65aaa78c7633f6e43d4d0dd9ae6f5a14a619efa4b0a9f60c18d47b990889823921753082c2a3b944c40ed79c239f8dc8ab59a4e0e9695de3b7ae13f801116eb271b99def5816fd69f498c1df7977ba25dbe5015ebcd01020d62373f4f727597857d1433ea9384eacd68e1ec6dca85a8bba3601ea0a219f0da1e45529d2bd1e9f94e0fd60417634d25b80b76bc5d1da8d452bc42eace06f2e0669c6329a9089af77d94c7752750ec122fcbb60abdc6195ec0cabebcdfd3e9f9ef6c239fad7679f9888ad712faad1b32394566b459f5642904a989eb63b891cd05419b48a598ae01ba972b69975a6adf539c0bf36a3dccb8cac683523e918e64f9f039f87e48ad5239a147348e6f68467f4e161aa064dddd6b705d97976acb71412dc1a5c88244cd7ff86253b77233b97b4d790b9a507b9cfe7139a3f6223e9a8d5edd8dc72500a5155cbd233b0ca1a82ff382f7f2c23787d955dc43d382e6a4f6101a7d2d8d8d7b672f0446939f738830cac1f50ea57676b89714c46ed8d811455903dfbfe16f4f326839939d07bf8e946071323c9c7154bd871a7637407282c6eb6f82ada977aba1ff4e57e48432cfcc12b1c74e45b612083278911ab2eefaa38f86ecf4f6cb694ffed0a50ffa4c048c1f09b54c052e6f768aadc5446c9ca10609fc3aa626aa5478a3eddf0fba1c01edfffe0c67af5b1397b06f8fc0b16c7ae8f1692364665abecb285cfa39b03449d4de4038abaa01d4b3351f47616e9b6688a6a954f7e140051a94925e0d53fad592bc2aa6825ec18c4a43def8d7cbf312751fd560a231a8a4fda6674f6104cefd15a876d677a3cf969adaf87277ee6fea142ea0d073da889222522d3f7341d6cb75c3aaf172cec7ff1a516a1ee5f46100dffa5b4a8d22478dc9b0b33f00032528fecf2b4dd89c7c14d98066d0296b433a6fd3f0925927b39cfe9c8cabd60ddfbc1ed4e3070e500725fbc7eb0b68f69195070b52244cd5cb33364c1d1c25f58057dc9ffd41729db26ec95e9f72bf00d46a59deac2597360e6c6f5c9eb538818244bc7cb649485f0b0d00cb8eabd602aa82ae5129971502a6c8a86f2596d0bcd38c46af0c16e98db52b8979d53cde23aa13b5f86dedbf15a38a6f8a5809f48ca0d4bbff5af34a6c0a54bea4800606af1100173e04d03f30608c1375bd7643329b56be71033fae6eea636b70f895e0ff79b8ed5f90f51f25060947d21f86e1e024df383a49513551a7e4128ff9b4aa4ec327e937796383b78c47f77cb5218119bdec5e48f5f5ab08cf460ef364a9613e9da287cc4ce272d931817196a391dccb13632df2cbe35490af9cf2cae0503ecca2c5cc295200848bdb7e55000e8eaaec8ed26fc90060c9b35c83ca4b108be50e16d5b0e06fad32d1dcf4c702f23c7a7e9f78cacb10e8b2089abbf389c2d605ab1449301c0f63f2b00abcfc5f23633018c27695502867dcdb14befb10f03049bfa7871bdd8bf11da4f7052a6a1ee5272a383632bfadb9f2dd751a150d5fac66812db6eeb82a0119f4b082f8ac739fc022b0ff00053a6c8f8a44083c82f58e27afad845817a477a6092db59bc87b324615494e973d983c9f20f9b93e572970f58d56bd85d18f41328566b288b4ddf718952465d413edfbc25543d68bc6658ced842c22fc23b9a82743bdbcec6642c5be303bb34afea2c496327fcc6c7a092b804ca52791cec34fcded22d1ef100a53a205882899772ac4df4c8ae5dfbf1ee4730bed5eccbb139d83114116348d8a208f0a270594dc2e4849aef6b6752dd31ba7bda90f4ccb5d7a0075a589588025a8e3d557231e13230dc409e60674e76a9c69c1add971f784654da80e4b0b183d2635da178417092efe8ec013b063b9dcdde60b848214dee534f00149e476b3c2882de8d5ea33a4f172502501c15e775859926aa56f5029ac4f6f2652ec675219c63afb2be423543e9e056b34b72f60f54955f038ff47052b475232bb593396611dfda66202acd0c4d9ad4cda256718bae4a629a53b93d8f41d2c22d1574c493ca8bf88eaeaa40f63581711b7293dd50c23c527e92902dbe3c1e99c4bb7ae7bf0fb0bb51bed61db20089165c13561d8d4a4a2652d716002dabe8c6b84726284e09ffe30e83b97c2a0ce9642574019a926eb5f1cbcaed1e1bea1217b30684d28cfbfe6bb20c6f208aeb20ab002985438e0546596ab235c7013b7999f783b0683660578e8941da282584e289a2bc8861b9412244cafc87486b651d06bb4eac355f6575c75745f4d35c7a74d8acd4d6e4989d833423205f63308f4325ad20e2071ea886264d13abf7891892a73e54e0d67926385d27237b1bf554c42fc605f114e462c639e366bbee4cf1e14d75cc0669332d7af2b5d50cad6d1eede6ddfc2c1daa87b075728a540de4573a7702b1dea41c764485d1d32f24877095134c742e1b91752390e768056ab1882e2e3458a0ec7fcf688526291bef12c528e082859ea3fdfed49c6cb01854dfe9d03c0421038c801ce242a53e46f516ad802440f33b66c6ee51b8acff7ad84b644e39147acd256445ffc9be2c295c5487c9f2d91f1b85e9c8269fdcf349a8734f304148547fa1577e911663760c8c61feb6f69b06046103c132c4b52449492cef000d7122a0896719e04f584b11aaaafd82ce31415cd93e26dbd9a6550192940dcfe186156e58b0e445a104e532233eddf3128cee0663a8dd83dad668940d0bdd40c56bcd408fe2c2c37f8104b4aa429cf2f5ecbd384392b60c0850580f5cc493203d02f2e4a2a344ad5acb678defd2da4a9fa6c92700407f25f7441308730e67c7485fbf6a3e6f26d42720dbd9571e27ac59e4c89107fe5faacea651f7283dad9af682d8f62a5148616ff026eea896b2acfe5278e597570b1570f14f7e3c2a971e9c97d4d18b280341d04b3d2d38146afd12f48e618d3514005187954adb5dde9d26062f3da9d033ef7876f2f377535b15e9886f7dcdab5761a0991df237984b63db6b9da097cfb9b2fe8fa34265333e06b414f5f42d856584935cc86c9c95caa982f8b684eadf857f458bdc1c03cd0da7c765367da5b90872cfe2de0d58a8216796ce1550bfa5ca214ed65db1007329e3fb141702a0f4578a1ac476d71125b6749ecac2a1d0e015ea2f28b0bc40eb08b9ce5de4fa034b296afa6e775f1607648288f3869fa12679dd4d1bc02f"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4f09a39f73a2a6d0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = open(&(0x7f0000000280)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r6, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000940)={0x2020}, 0x2020) openat2(r6, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000380)={0x2f8800, 0x121}, 0x18) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0xc5) 4.919458389s ago: executing program 2 (id=500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x6, 0x7f, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x0, r0}, 0x38) unshare(0x24020400) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000000140)="bf063c939dfe4becdc8559b93a7ea78acad5192927ebcac8907b77f4347bc6d7b1b1c8cb176491e114fb90ce", &(0x7f00000002c0)=""/215}, 0x20) 4.560538058s ago: executing program 2 (id=501): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000800000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb00"/400], 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '#! v\x978RQ\xd3\xd1\xbc\x12$`\xe2\x1fB\x84\xc8\\Z\x10RE\x05\b\x90ui\x9e\xd7F\xe1\xe3\t\xd6\xb8\x18:\t\x8f\vD\x06\xcd\xc1\x02\x0f\x105W\xa3\xf3@\x02\x03.\f\xc9IG~\xe4\xf5`U\x04\xd2+\x8f\xb2\xe7o\x91\xd3\xc6\xa0\x81j\xd1{r\x9a\\\xf7:\xd0y\xa0\xf1\xabV\x7f\xa9\xb5\xc2\xb7\xc4\xe6\x11\xf8\xa0\xa5H\xc7\x95\xef\xd6\xb9\xb1*\xc7\xdd\t'}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '#! '}]}, 0x1008d) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d38832db43c8a5cde96a485de9751cf"}}}}, 0xa0) socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x20000000}) ioctl$TCXONC(r2, 0x540a, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000015c0)="302d0d5768d16990b91ad67c5ebc02b9a3e765580eb92343077eb3b6078d338d7e45f978611c58863321e74351bd3431be2f3ff20472f3e1ce2deb38e574f32d3449bc7ec882d3b895ba27875562e896dfc83c7bec1a35a90b9ef666c65088fc8b9b503ecb91dc7f0d8c4e9747d8114a8c37df43c9da5ed38cc4d2df3388c565d71f947d636fcc01678191c95f599b6f6e8c384eadb8293f180e2df3e8a966d4c3882a63d45df7e7a2b5c8b83b90f5d672ece36df84e28508f53972f96e36e1bf71be30c90d7de140888630a30ea3cd9309a50b973acd47cd0537fea25fdcbaf51666f07bf3203961ae7fff91b9924a800c5a66a6343743744d87c0cfe5c69d780dd93eab40164a9f682dde5e0e235fb3464503b4b540e60c57a853cac34d77209a66a306c5377eaca328df67ff705ba6141ea9c9c89f66ed5f7fb8ecda0989d66e6c673628d1a88313ba0ccb816b5bfa7b084847260c978b2365e3301968f8cbc4e768fdea4119bb1b7aa0505e370af25040b203827bfadf7dc0f8fbed758098a63a4f8264addccb827c7a8cc0e60af2d46466b9a46cc8c688e40e1ca7e71a06e47d5f99a786006f706ff7f0acb66716c84a039ba8bd043d5760cf9101de846a0ee32017456a04dd6dd48f608b7bc3a56201077201d2dd17de34ddb8cf4b16c43eb43c074ec7c52277fabc491092adf138137f676398c5069301e18a6e5552dcbff8ca1bf67ae2f0db3f9bfcd3234f770b22fa5663241b72e44d9b559cfbef172b03b508d3698369d281b328232ff7807771b628f79b5bb72a514f1f5bc70f0753d3176005dc45ab41e59db86bab1b0e185eaf79619fd2e5325d4acc13b27e5ecb508ec55dbf1839389b3bcef0350337421a6844801e8181a656eb2933970eff41f7d6d3c90adf2cfdf1f614cf3091639c956a86b1a2bacf9a45fac1cbf3c95f8e9c50eed6dff614690169544b3155069aac3c214cf226ba5ed6cc6cf93c8f10dbcc26ccb960addcf240d53d22168747e8031fbdbd22a2c11a9bc7c7ece1c9359eb9d74e6ed1e94520facad3427631ff97b39f0789d2b95605573946df7dded683ee40c546d212e0632e859a89bbcc819af6d84efe8b83d83a4e38fa33b4e2b1354bec07d44474a40914e09a096a9ee8cc369affc61b3698a1d1340304de151de767fdb949310d0a3729e2f8b1a6570b51ba795ba74950832312b5837ef92318e74709ff8fbc2f3b0300bb48ff7365c493df15341643cb6fd18c65ff0c7765adade5213d8c0ecb24ba75beda998f4d130dfbb1af632ff82eaca6eec02e4906ffdff3cb93685a25de89a7018c2d27fe3467d6e376fb7e6b298a5c3172cd340d19edf3aa266256bd32350f372a94043eef619dcfb938a4302badfb3cc2b2a2af2d822795845b99ee253d951888adf7d4adaa05638bbb379862393f0772ca5c8d267ce75d369d8a4239b60d47d60d469497108789f9724b1f6a5122bf97790e25cb64bb0e1db8f358e1acb9aeb476075a44b24cbdfddab16c52d8e6cdbfd5102ecdacf83dd9b79b3dbe836e1a4495a2df5d2166df51520e37900c18a4414e148307041bc67fd69a4a2bc2bf1f88a6be602e3be1ad6d23ab3f1378ae564844de8a90c858d7e8ada9bd9de184a4992f03f7dd1f641e18d8e7b5e575f9951a91988690f6256bc77ba8db4a144a6f4a6b39471f5e8f7d3d333b3f582bc463253eab86b994e6ac413603a793c4b61b31b7c07b4f3456483a34f3e8538910286ac1a2f380d7486198b417d13e2d940ffbf344164bb2fcbe47271659887b3856e48c67575339fae44a5ba15c0173928352a41f5317c2b9089a38b4449110726a31128c6760634754335a102801ab365fe1adf0560dce8478bb305bc4737d74719ba64f4cf8fe998b2ccfb3f68d4d93ca0036171fb6813c0fc7bc70f14305bca4f9c26479534b722c263364fe9ace91a32e0d1aa61e0dec6ab4fb5a627479fbb9433d897f957a27e971b1985f482869486fa2e3c746c76348adf3e4325f7f2587b9773411ef451d1d6759d5e1fd0f58e256c0e8a3e85b7f711300dc3bfe5cc9cdde338e523e56587f0ce962664268d71d5298a4701a98aa2ab284f16379203aa527a91d6e19345583d438f01892d947eab1fa0ec5f18c98e7d4c8ac368de50c643e44fa43e64f8e9016915cf4d32f7cb4841c7aabbf3a2d61efc8b6dad65da5155096a139410b7cdf7ae0e5e679a047acfe45417bc90e32f08ce79a4bc60ce7f912845d1de8255408d4452e80f208960d2f837aece6fe6215366468263fbc5516946cb33d9cadee729d51feaab7404d92b230670b99eac56b9e6142cf5fcd7e291c3c22d60ad90c0a23b8543c1f3e28b02f5a97de21d22815b4231dfb383ef6192d7fd1a1644f053d00493192c5bd896a1d5c46914346246e6f658165fe05a3aa306b43ffb80421ff47bd4af7febd7c52749ca3bc9e1003b592b82875eee0cf2f5221234538737082c86c329f54fdc4c3c42ba0fa8d7d427e6cbbfee58e8c7e628c5a80afbc16e850638d93f65ac84456cf779c199275bccbc341c0b510a782a1f33f933430a5d66e97e3605a9f8c78e6cd2101e06d9753a7146ed9497f89c8b26ea138c243017fcbb494b8c8696a1ce3fc569a98d0d4d39b3feaaeb6fc3a6f7a9996eade16d1e2bc70e7b07999d24fa7bab3cfcb0045a688ab51969fbb39aa8eb54e97d76ee13f08b5be99547a862d6fd71c8220949f41c74a8f7cc7a983afb4566e9780dccb6d54e57829ab38dbf9064f348f8832904eccf9714a74988262733c81d5a9dcb5624aa1c4642c348fb8d1a74b0161fd947ee6fa921fcf71ea76cf9ffe0c4926b5f975773b1760ae48392ed235e87a0c9bbc1e86bcae820e8a857e3b084d804f9a8ab9c832adebe4e77ec523750e690b3b980b613fb992532486229a5dd9ca7ffae4c9a535b8131df7b4e53aa7afbddcdac098e38956e97aca31908fda9f1b24b32b27e014876c12b7648abc7d673a4eebf9449460db36ad75ce4b28f69a80d86f74fa2c8cdf81d678fef38714329a084443c27537c296c74ee7a04e5bed00d68d2521798148003002d6a8c406ba60d591e1cbe0400a6f51528f3fe4343a6a55e898260c69107ed03f80df47d14b7e8f3ee0a3c94dae59679de29d62f2721c261102ec1ef82bf1b4e62524b3938d7f84a210f0bbf483b3f9b2b8d50dda111c4b09ae929f4ede3efd9aaa961a27cc3e2b5edbbda895264f9fa461569ea3e74cb911d8cc67b84f744f87e4a2da81a980c66408ea2f49a89bf19881bf207764b67d2d2adfb8bc37a85fcf770abf3e0a67da73b08781ddab9703dd1717066dece8214d6d98f51628bbe74f9e05cc30d51c98772187e3defa15f88119e0e53d1d2341373c5cc2285725fee1cc9db2b5003cf6952b384bfd41f029691ae2232a48734fdea2ebb5d58252134025b4c1404c4aa83a24499042dab78a08c5455a0cc90d72456d9650991863c96e367b968ecd0b4f3983c800bb201ca93fba1a6622af625061fb519b79c7383bb7459d4122cd8261dca9be3db597e72b6f64da635b6aec60c3aad6bf5548fe4a17128fe19ffab5ab9cc0e9220c1677c2ad4ef0f4a1a8990988b3c135d2306f2b98aaa09b2e2c29ecf7eed23da22ce7f6a20b2124a02b864638bebaae8375dd2baa7a38fa31e9625afc041571d87bb992c69f06f8cb77312dd3f927b2993e59ef3d0bf95cfed7f973ed6be44593a827366ccdc91e19b114b71320e9ba81baeefd67464d55e3a6185ee9429d9c8bcaba5a850456eb8c8f8027eb6ed06df4105fe7ee5e5589d2d8255e106786650ccefd2c54e0b59f506b710dc352045e17aeed7efe8371b2c13717e96b99f2073bdfb5e997a95f62311fa56ac423b054e03cf6859833413ea8ccb7a6943460995e009e87135783f93e33a40f970e133f85b5c7f9f21838d12dbc408e428f8b16b9b4aa50c95706b41c0a40ae43b2dd52328ae6b7537c96d2402037d7ea3c7d1ed42b97fd0e261da31d4a524affe40dca6993e1de1bc6bec4a22fb02857296aaf32476f8fd47f78031b5e246bf98ea364400779443d5ca92ec509a28ff991a1bce8e8cdfe5093aa9d444b810b5ca9c39c9517f7bf2b0f984ab7aa8778b00d4033632dac878f2676c4caaa13458", 0xb81}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000140)='\v', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x0, 0x3, 0xfffffffd}, 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES8], 0x1a) 247.127718ms ago: executing program 2 (id=502): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x220000) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f0000ffffffffffffffff1e277fffffeb"}) r2 = dup(r1) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, "9441a07033acaad7"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) vmsplice(r5, &(0x7f0000000500)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000340)=0x9, &(0x7f0000000380)=0x102) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x3, &(0x7f00000000c0)=[{0x9, 0x0, 0x0, 0x7fffffff}, {0xb7, 0x7f, 0x4, 0xfa}, {0xfffb, 0x7, 0x7, 0x1}]}) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x4, 0x10001, 0x0, 0x9e4, 0x2, [0x600000, 0x100, 0x1000, 0x7]}) link(0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB="2cd6a1f8ca040688297d1841c86ef885a54d61c3f9d39453463216a1b4f56ab2af2ab59ade9f79832083209fb2f4bd5fd07ffacd7e7dba741b69e1d627bb7cf03157cb4e337f797235093e9973ff48f145e6d0deedbc5f3e31884d510d5edc14408520b9865f"], 0x24}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aefd16374f10780590f7d68a86209e2ee6ddd0fd88072a7a16dfc96b42164376ddbe20bee70e9ba131522291395f319b2366f2c3bdf60105838835ce8d69b34cf8c8223e987a041a92e0cba49afc30d690f9b0b312966f664336fbbf17f5c10eb3d90044bdbad8137e7a6997fc6fb447ac7602afcf6ba73f89fb2a1028174ddd82583cf118d3c6dd6f"], 0x190) r8 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f0000000100)) 0s ago: executing program 2 (id=503): mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002180)=""/4089, 0xfffffffffffffd79) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x186a1}) sched_setaffinity(0x0, 0x5, &(0x7f0000000540)=0x40000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x26102, 0xa0) linkat(r0, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000280)='./bus\x00', 0x8ffcaea8338f1dd1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)}], 0x1}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, "6b8ee1", 0x1}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x0, 0x0, 0x52424752, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x800, 0x8}]}}) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f00000001c0)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2160}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 5xx failed with error -22 [ 98.178613][ T5140] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.358769][ T5240] udevd[5240]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.411817][ T5136] usb 2-1: USB disconnect, device number 3 [ 98.996495][ T5140] usb 1-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=cf.51 [ 99.043687][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.117504][ T5140] usb 1-1: config 0 descriptor?? [ 99.172576][ T5140] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4 [ 99.279631][ T5256] netlink: 184 bytes leftover after parsing attributes in process `syz.4.26'. [ 99.403788][ T5259] netlink: 'syz.3.27': attribute type 48 has an invalid length. [ 99.675319][ T5140] gspca_sn9c20x: Write register 1001 failed -71 [ 99.708864][ T5140] gspca_sn9c20x: Device initialization failed [ 99.733974][ T5140] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 99.793967][ T5140] usb 1-1: USB disconnect, device number 2 [ 100.380510][ T5272] kvm: emulating exchange as write [ 100.595726][ T5272] Failed to get privilege flags for destination (handle=0x0:0x0) [ 100.684582][ T5281] QAT: failed to copy from user cfg_data. [ 101.357024][ T5279] sctp: failed to load transform for md5: -2 [ 101.423463][ T5137] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.596133][ T5136] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.652709][ T5137] usb 5-1: Using ep0 maxpacket: 16 [ 101.680428][ T5137] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 101.690874][ T5080] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.715633][ T5137] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 101.768181][ T5137] usb 5-1: language id specifier not provided by device, defaulting to English [ 101.795126][ T5136] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 101.818707][ T5137] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.824291][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.842740][ T5137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.872895][ T5137] usb 5-1: Product: 㰊 [ 101.877216][ T5137] usb 5-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 101.919038][ T5136] usb 1-1: config 0 descriptor?? [ 101.920410][ T5080] usb 4-1: Using ep0 maxpacket: 16 [ 101.930725][ T5137] usb 5-1: SerialNumber: ఊ [ 101.941703][ T5080] usb 4-1: descriptor type invalid, skip [ 101.973346][ T5080] usb 4-1: descriptor type invalid, skip [ 101.979087][ T5080] usb 4-1: descriptor type invalid, skip [ 102.032854][ T5080] usb 4-1: config 0 has no interfaces? [ 102.092821][ T5080] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 102.122767][ T5080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.131021][ T5080] usb 4-1: Product: syz [ 102.162660][ T5080] usb 4-1: Manufacturer: syz [ 102.177865][ T5080] usb 4-1: SerialNumber: syz [ 102.228109][ T5080] usb 4-1: config 0 descriptor?? [ 102.319231][ T5291] IPVS: Error connecting to the multicast addr [ 102.366176][ T5137] cdc_ncm 5-1:1.0: skipping garbage [ 102.382024][ T5137] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 102.404281][ T5137] cdc_ncm 5-1:1.0: bind() failure [ 102.429573][ T5137] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 102.436760][ T5137] cdc_ncm 5-1:1.1: bind() failure [ 102.459475][ T5137] usb 5-1: USB disconnect, device number 3 [ 102.551049][ T5296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.597130][ T5296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.672567][ T5180] usb 1-1: USB disconnect, device number 3 [ 103.249100][ T5313] capability: warning: `syz.1.41' uses deprecated v2 capabilities in a way that may be insecure [ 103.308251][ T5315] netlink: 76 bytes leftover after parsing attributes in process `syz.4.42'. [ 103.354146][ T5080] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 103.402464][ T5137] usb 4-1: USB disconnect, device number 7 [ 103.602333][ T5080] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.684101][ T5080] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 103.803494][ T5080] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 103.819538][ T5080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.832170][ T5080] usb 3-1: SerialNumber: syz [ 103.880142][ T5080] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 103.918623][ T5080] usb-storage 3-1:1.0: USB Mass Storage device detected [ 103.971884][ T5080] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 104.056978][ T5080] scsi host1: usb-storage 3-1:1.0 [ 104.100083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.162912][ T5093] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.172782][ T784] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.192306][ T5310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.224300][ T5310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.359520][ T5093] usb 5-1: Using ep0 maxpacket: 8 [ 104.372942][ T784] usb 1-1: device descriptor read/64, error -71 [ 104.388261][ T5093] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.412146][ T5332] sp0: Synchronizing with TNC [ 104.429324][ T5323] Failed to get privilege flags for destination (handle=0x0:0x0) [ 104.438570][ T5093] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 104.452710][ T5093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 104.463932][ T5093] usb 5-1: SerialNumber: syz [ 104.488080][ T5093] usb 5-1: config 0 descriptor?? [ 104.507885][ T5093] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 104.542535][ T5093] usb 5-1: No valid video chain found. [ 104.595726][ T5133] usb 3-1: USB disconnect, device number 3 [ 104.663618][ T784] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.710448][ T5093] usb 5-1: USB disconnect, device number 4 [ 104.852821][ T784] usb 1-1: device descriptor read/64, error -71 [ 104.973484][ T784] usb usb1-port1: attempt power cycle [ 105.404491][ T784] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.486199][ T784] usb 1-1: device descriptor read/8, error -71 [ 105.552810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.740493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.804794][ T784] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.845421][ T784] usb 1-1: device descriptor read/8, error -71 [ 105.886777][ T5345] binder: 5342:5345 ioctl 4018620d 0 returned -22 [ 105.974238][ T784] usb usb1-port1: unable to enumerate USB device [ 106.142182][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.50'. [ 106.235757][ T5352] input: syz1 as /devices/virtual/input/input6 [ 106.303048][ T5088] Bluetooth: hci0: command 0x0401 tx timeout [ 106.717757][ T784] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.906320][ T784] usb 2-1: device descriptor read/64, error -71 [ 107.069075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.158226][ T5356] openvswitch: netlink: Flow key attr not present in new flow. [ 107.192966][ T784] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.354929][ T784] usb 2-1: device descriptor read/64, error -71 [ 107.523039][ T784] usb usb2-port1: attempt power cycle [ 108.228454][ T784] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 108.305860][ T784] usb 2-1: device descriptor read/8, error -71 [ 108.327600][ T5133] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 108.556650][ T5133] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 108.572918][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.602962][ T784] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 108.614278][ T5133] usb 4-1: config 0 descriptor?? [ 108.673364][ T784] usb 2-1: device descriptor read/8, error -71 [ 108.839581][ T784] usb usb2-port1: unable to enumerate USB device [ 108.922817][ T5137] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.104623][ T5361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.125972][ T5361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.143932][ T5137] usb 5-1: Using ep0 maxpacket: 32 [ 109.158800][ T5137] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=99.d3 [ 109.205030][ T5137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.231387][ T5137] usb 5-1: Product: syz [ 109.245575][ T5137] usb 5-1: Manufacturer: syz [ 109.252480][ T5137] usb 5-1: SerialNumber: syz [ 109.274965][ T5133] usb 4-1: USB disconnect, device number 8 [ 109.303147][ T5137] usb 5-1: config 0 descriptor?? [ 109.326066][ T5137] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 109.346762][ T5137] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 109.572313][ T5137] radio-raremono 5-1:0.0: this is not Thanko's Raremono. [ 109.580719][ T5080] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 109.599435][ T5137] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 109.613548][ T5137] usb 5-1: USB disconnect, device number 5 [ 109.653609][ T5140] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 109.870968][ T5140] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 109.896333][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.923720][ T5140] usb 2-1: config 0 descriptor?? [ 109.982065][ T5080] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.997072][ T5080] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 110.008866][ T5080] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 110.018413][ T5080] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 110.868176][ T5080] usb 1-1: SerialNumber: syz [ 110.912501][ T5080] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 110.923771][ T5080] usb-storage 1-1:1.0: USB Mass Storage device detected [ 110.935348][ T5080] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 110.969381][ T5080] scsi host1: usb-storage 1-1:1.0 [ 111.298468][ T5381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.430384][ T5397] Zero length message leads to an empty skb [ 112.178044][ T5381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.613796][ T5140] usb 2-1: USB disconnect, device number 8 [ 112.804643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 113.091251][ T5410] sp0: Synchronizing with TNC [ 113.190573][ T5409] sp1: Synchronizing with TNC [ 113.603986][ T5093] usb 1-1: USB disconnect, device number 8 [ 113.745375][ T5415] binder: 5411:5415 ioctl 4018620d 0 returned -22 [ 113.887774][ T5415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 114.093169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.375132][ T5429] QAT: failed to copy from user cfg_data. [ 114.463562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.852354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 114.946252][ T5088] Bluetooth: hci0: command tx timeout [ 115.263475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 115.364038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 116.453525][ T5448] overlayfs: missing 'lowerdir' [ 116.688183][ T5137] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 116.940279][ T5137] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 116.988662][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.021609][ T5137] usb 4-1: config 0 descriptor?? [ 117.022905][ T5088] Bluetooth: hci0: command tx timeout [ 117.372715][ T5093] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 117.377367][ T784] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.393342][ T5465] sp0: Synchronizing with TNC [ 117.589961][ T5443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.610260][ T5443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.612801][ T784] usb 5-1: Using ep0 maxpacket: 16 [ 117.624723][ T5093] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.637346][ T5093] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.656312][ T784] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 117.656627][ T5093] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 117.692258][ T5093] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 117.702350][ T5093] usb 1-1: SerialNumber: syz [ 117.711528][ T784] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.749898][ T784] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.752363][ T5093] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 117.790283][ T5093] usb-storage 1-1:1.0: USB Mass Storage device detected [ 117.829585][ T5133] usb 4-1: USB disconnect, device number 9 [ 117.837579][ T5093] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 117.858926][ T784] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.882756][ T5093] scsi host1: usb-storage 1-1:1.0 [ 117.930016][ T784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.017868][ T784] usb 5-1: Product: syz [ 118.028936][ T784] usb 5-1: Manufacturer: syz [ 118.044683][ T784] usb 5-1: SerialNumber: syz [ 118.347214][ T5459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.395269][ T5459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.507917][ T784] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 118.657813][ T5080] usb 1-1: USB disconnect, device number 9 [ 119.129078][ T5482] loop0: detected capacity change from 0 to 6 [ 119.230702][ T5482] Dev loop0: unable to read RDB block 6 [ 119.275990][ T5482] loop0: unable to read partition table [ 119.288958][ T5482] loop0: partition table beyond EOD, truncated [ 119.298997][ T5482] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 119.298997][ T5482] ) failed (rc=-5) [ 119.337623][ T784] usb 5-1: 2:1: cannot get freq at ep 0x82 [ 119.344120][ T5088] Bluetooth: hci0: command tx timeout [ 119.517874][ T784] usb 5-1: USB disconnect, device number 6 [ 119.784796][ T5133] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.987553][ T5208] udevd[5208]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.023040][ T5133] usb 2-1: Using ep0 maxpacket: 8 [ 120.041342][ T5133] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 120.088621][ T5133] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 120.140235][ T5133] usb 2-1: config 0 has no interface number 0 [ 120.172948][ T5133] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 120.191992][ T5136] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 120.229713][ T5133] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 120.246030][ T5133] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 120.313786][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.354968][ T5133] usb 2-1: config 0 descriptor?? [ 120.362015][ T5498] binder: 5494:5498 ioctl 4018620d 0 returned -22 [ 120.371473][ T5485] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.403868][ T5136] usb 4-1: Using ep0 maxpacket: 16 [ 120.417610][ T5136] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 120.445175][ T5136] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 120.460453][ T5136] usb 4-1: language id specifier not provided by device, defaulting to English [ 120.476884][ T5136] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.490900][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.499754][ T5136] usb 4-1: Product: 㰊 [ 120.509276][ T5498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.89'. [ 120.518620][ T5136] usb 4-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 120.533051][ T5136] usb 4-1: SerialNumber: ఊ [ 120.865323][ T5493] IPVS: Error connecting to the multicast addr [ 120.910585][ T5505] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0 [ 120.929716][ T5136] cdc_ncm 4-1:1.0: skipping garbage [ 120.947100][ T5136] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 120.998160][ T5136] cdc_ncm 4-1:1.0: bind() failure [ 121.051630][ T5136] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 121.088201][ T5136] cdc_ncm 4-1:1.1: bind() failure [ 121.323070][ T5133] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input8 [ 121.347045][ T5504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.355937][ T5504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.461718][ T5136] usb 4-1: USB disconnect, device number 10 [ 122.534230][ T5093] usb 2-1: USB disconnect, device number 9 [ 122.534311][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 122.612920][ T5512] bridge0: port 3(veth3) entered blocking state [ 122.636714][ T5512] bridge0: port 3(veth3) entered disabled state [ 122.854671][ T5512] veth3: entered allmulticast mode [ 122.879452][ T5512] veth3: entered promiscuous mode [ 123.340343][ T5512] bridge0: port 3(veth3) entered blocking state [ 123.347338][ T5512] bridge0: port 3(veth3) entered forwarding state [ 123.974275][ T5137] bridge0: port 3(veth3) entered disabled state [ 125.461675][ T5541] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.663746][ T29] audit: type=1326 audit(1719933205.547:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5543 comm="syz.2.101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f578df75f19 code=0x0 [ 126.416040][ T5553] sp0: Synchronizing with TNC [ 126.788415][ T5564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 127.024346][ T5574] QAT: failed to copy from user cfg_data. [ 127.503099][ T5577] netlink: 60 bytes leftover after parsing attributes in process `syz.1.109'. [ 128.222986][ T5088] Bluetooth: hci0: command tx timeout [ 128.698459][ T5592] 9pnet_fd: Insufficient options for proto=fd [ 131.198444][ T5620] netlink: 'syz.1.123': attribute type 2 has an invalid length. [ 133.502600][ C1] sched: RT throttling activated [ 136.821659][ T5680] QAT: failed to copy from user cfg_data. [ 138.709588][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.743839][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.820451][ T5720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 139.870405][ T5720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'. [ 139.907023][ T5722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.147'. [ 139.936832][ T5722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.147'. [ 139.969694][ T5725] evm: overlay not supported [ 140.023412][ T5133] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.040511][ T5725] dummy0: entered promiscuous mode [ 140.077119][ T5725] dummy0: left promiscuous mode [ 140.237121][ T5727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.148'. [ 140.271294][ T5727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 140.273600][ T5133] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.290903][ T5727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 140.290996][ T5727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 140.354091][ T5728] netlink: 256 bytes leftover after parsing attributes in process `syz.4.148'. [ 140.390046][ T5133] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=39.78 [ 140.400101][ T5133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.405247][ T5728] Bluetooth: MGMT ver 1.22 [ 140.427752][ T5133] usb 3-1: Product: syz [ 140.470876][ T5133] usb 3-1: Manufacturer: syz [ 140.483006][ T5727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 140.483204][ T5133] usb 3-1: SerialNumber: syz [ 140.509657][ T5133] usb 3-1: config 0 descriptor?? [ 140.533785][ T5133] usbtest 3-1:0.0: couldn't get endpoints, -22 [ 140.544556][ T5133] usbtest 3-1:0.0: probe with driver usbtest failed with error -22 [ 141.933096][ T9] usb 3-1: USB disconnect, device number 4 [ 142.917375][ T5080] kernel write not supported for file bpf-prog (pid: 5080 comm: kworker/1:3) [ 143.841405][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 144.062720][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 144.076309][ T9] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 144.088042][ T5772] TCP: Unexpected MD5 Hash found for 0.0.0.0.0->255.255.255.255.20002 [.] [ 144.122842][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.154436][ T9] usb 1-1: language id specifier not provided by device, defaulting to English [ 144.214031][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.246575][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.289603][ T9] usb 1-1: Product: 㰊 [ 144.302911][ T9] usb 1-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 144.346121][ T9] usb 1-1: SerialNumber: ఊ [ 144.421085][ T5786] QAT: failed to copy from user cfg_data. [ 144.765483][ T5777] IPVS: Error connecting to the multicast addr [ 144.839504][ T5792] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0 [ 144.847694][ T9] cdc_ncm 1-1:1.0: skipping garbage [ 144.876813][ T9] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 144.902640][ T9] cdc_ncm 1-1:1.0: bind() failure [ 144.959287][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 145.019331][ T9] cdc_ncm 1-1:1.1: bind() failure [ 145.116447][ T9] usb 1-1: USB disconnect, device number 10 [ 146.442949][ T5801] __nla_validate_parse: 5 callbacks suppressed [ 146.442973][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'. [ 146.472707][ T5080] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 146.695052][ T5080] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.730381][ T5080] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 146.774152][ T5080] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.799050][ T5080] usb 2-1: config 0 descriptor?? [ 148.163079][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.352782][ T9] usb 3-1: device descriptor read/64, error -71 [ 148.673077][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 148.694262][ T5833] sp0: Synchronizing with TNC [ 148.862848][ T9] usb 3-1: device descriptor read/64, error -71 [ 148.995350][ T9] usb usb3-port1: attempt power cycle [ 149.105961][ T5080] usb 2-1: string descriptor 0 read error: -71 [ 149.125030][ T5080] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 149.159924][ T5080] usb 2-1: No valid video chain found. [ 149.183568][ T5080] usb 2-1: USB disconnect, device number 10 [ 149.442794][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 149.503503][ T9] usb 3-1: device descriptor read/8, error -71 [ 149.792867][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.869018][ T9] usb 3-1: device descriptor read/8, error -71 [ 150.008553][ T9] usb usb3-port1: unable to enumerate USB device [ 150.623306][ T5088] Bluetooth: hci0: command tx timeout [ 152.949233][ T5840] syz.2.180: attempt to access beyond end of device [ 152.949233][ T5840] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 153.056497][ T5840] SQUASHFS error: Failed to read block 0x0: -5 [ 153.119021][ T5840] unable to read squashfs_super_block [ 153.860809][ T1060] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.986219][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.001836][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.038717][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.056057][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.078136][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.089008][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.293578][ T1060] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.644601][ T1060] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.896746][ T1060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.936148][ T5865] QAT: failed to copy from user cfg_data. [ 155.578528][ T1060] bridge_slave_1: left allmulticast mode [ 155.621031][ T1060] bridge_slave_1: left promiscuous mode [ 155.645916][ T5877] ubi0: attaching mtd0 [ 155.653418][ T5877] ubi0: scanning is finished [ 155.657653][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.658092][ T5877] ubi0: empty MTD device detected [ 155.753095][ T5877] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 155.760676][ T5877] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 155.768176][ T5877] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 155.775254][ T5877] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 155.783043][ T5877] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 155.790009][ T5877] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 155.798231][ T5877] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3519041746 [ 155.805078][ T1060] bridge_slave_0: left allmulticast mode [ 155.808445][ T5877] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 155.826893][ T5878] ubi0: background thread "ubi_bgt0d" started, PID 5878 [ 155.882853][ T1060] bridge_slave_0: left promiscuous mode [ 155.889519][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.142829][ T5097] Bluetooth: hci0: command tx timeout [ 157.832756][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.876698][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.913636][ T1060] bond0 (unregistering): Released all slaves [ 158.067419][ T1060] IPVS: stopping backup sync thread 5239 ... [ 158.226075][ T5097] Bluetooth: hci0: command tx timeout [ 158.778597][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 159.620142][ T5088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.629125][ T1060] hsr_slave_0: left promiscuous mode [ 159.638475][ T5088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.650817][ T5088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.025875][ T5088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.034466][ T5088] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 160.042176][ T5088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.114219][ T1060] hsr_slave_1: left promiscuous mode [ 160.229669][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.270914][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.313044][ T5097] Bluetooth: hci0: command tx timeout [ 160.334654][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.342374][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.534637][ T1060] veth1_macvtap: left promiscuous mode [ 160.540752][ T1060] veth0_macvtap: left promiscuous mode [ 160.582090][ T1060] veth1_vlan: left promiscuous mode [ 160.600478][ T1060] veth0_vlan: left promiscuous mode [ 162.038164][ T5924] syz.2.199: attempt to access beyond end of device [ 162.038164][ T5924] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 162.055133][ T5924] SQUASHFS error: Failed to read block 0x0: -5 [ 162.076872][ T5924] unable to read squashfs_super_block [ 162.143132][ T5097] Bluetooth: hci5: command tx timeout [ 162.383115][ T5097] Bluetooth: hci0: command tx timeout [ 162.583455][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 162.773689][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 163.089927][ T5929] QAT: failed to copy from user cfg_data. [ 164.223930][ T5097] Bluetooth: hci5: command tx timeout [ 164.391513][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.430569][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.463705][ T5857] bridge_slave_0: entered allmulticast mode [ 164.471373][ T5857] bridge_slave_0: entered promiscuous mode [ 164.563328][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.570551][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.622175][ T5857] bridge_slave_1: entered allmulticast mode [ 164.674591][ T5857] bridge_slave_1: entered promiscuous mode [ 164.804946][ T5940] bond0: option all_slaves_active: invalid value (2) [ 164.984900][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.083699][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.409575][ T5857] team0: Port device team_slave_0 added [ 165.614234][ T5857] team0: Port device team_slave_1 added [ 165.812743][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.819949][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.943087][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.994620][ T5091] syz-executor (5091) used greatest stack depth: 18800 bytes left [ 166.050886][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.079295][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.236458][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.302883][ T5097] Bluetooth: hci5: command tx timeout [ 166.384734][ T5961] sp0: Synchronizing with TNC [ 166.689624][ T1060] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.833691][ T5857] hsr_slave_0: entered promiscuous mode [ 166.858835][ T5857] hsr_slave_1: entered promiscuous mode [ 166.921482][ T5088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.932669][ T5088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.991742][ T5088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.661800][ T5088] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.678852][ T5088] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.686870][ T5088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.815793][ T1060] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.143060][ T5097] Bluetooth: hci0: command tx timeout [ 168.315405][ T1060] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.385144][ T5097] Bluetooth: hci5: command tx timeout [ 168.477187][ T1060] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.824988][ T5899] chnl_net:caif_netlink_parms(): no params data found [ 169.743451][ T5097] Bluetooth: hci2: command tx timeout [ 169.879543][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.891549][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.900432][ T5899] bridge_slave_0: entered allmulticast mode [ 169.909651][ T5899] bridge_slave_0: entered promiscuous mode [ 169.919689][ T1060] bridge_slave_1: left allmulticast mode [ 169.940076][ T1060] bridge_slave_1: left promiscuous mode [ 169.955869][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.967699][ T1060] bridge_slave_0: left allmulticast mode [ 169.973878][ T1060] bridge_slave_0: left promiscuous mode [ 169.979736][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.994819][ T5133] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 170.206727][ T5133] usb 3-1: Using ep0 maxpacket: 16 [ 170.225068][ T5133] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 170.242157][ T5133] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.257945][ T5133] usb 3-1: language id specifier not provided by device, defaulting to English [ 170.271891][ T5133] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.291614][ T5133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.300102][ T5133] usb 3-1: Product: 㰊 [ 170.304670][ T5133] usb 3-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 170.318620][ T5133] usb 3-1: SerialNumber: ఊ [ 170.499350][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.514290][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.526197][ T1060] bond0 (unregistering): Released all slaves [ 170.560734][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 170.664298][ T1060] IPVS: stopping backup sync thread 5505 ... [ 170.677945][ T5993] IPVS: Error connecting to the multicast addr [ 170.685052][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.692284][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.710511][ T5899] bridge_slave_1: entered allmulticast mode [ 170.720153][ T5899] bridge_slave_1: entered promiscuous mode [ 170.851522][ T6006] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0 [ 170.917428][ T5133] cdc_ncm 3-1:1.0: skipping garbage [ 170.932289][ T5133] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 170.938575][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.947866][ T5133] cdc_ncm 3-1:1.0: bind() failure [ 170.968271][ T5133] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 170.981922][ T5133] cdc_ncm 3-1:1.1: bind() failure [ 170.999348][ T5133] usb 3-1: USB disconnect, device number 9 [ 171.117702][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 171.132337][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.369706][ T5899] team0: Port device team_slave_0 added [ 171.500712][ T5899] team0: Port device team_slave_1 added [ 171.823086][ T5097] Bluetooth: hci2: command tx timeout [ 171.937276][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.942178][ T6019] QAT: failed to copy from user cfg_data. [ 171.979413][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.030773][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.110740][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.155317][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.184018][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.269747][ T1060] hsr_slave_0: left promiscuous mode [ 172.280037][ T1060] hsr_slave_1: left promiscuous mode [ 172.294211][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.313180][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.331680][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.343914][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.382071][ T1060] veth1_macvtap: left promiscuous mode [ 172.393517][ T1060] veth0_macvtap: left promiscuous mode [ 172.409579][ T1060] veth1_vlan: left promiscuous mode [ 172.415170][ T1060] veth0_vlan: left promiscuous mode [ 172.993909][ T6028] ======================================================= [ 172.993909][ T6028] WARNING: The mand mount option has been deprecated and [ 172.993909][ T6028] and is ignored by this kernel. Remove the mand [ 172.993909][ T6028] option from the mount to silence this warning. [ 172.993909][ T6028] ======================================================= [ 173.416077][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 173.463334][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 173.904057][ T5097] Bluetooth: hci2: command tx timeout [ 174.093656][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.100881][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.113634][ T5968] bridge_slave_0: entered allmulticast mode [ 174.121716][ T5968] bridge_slave_0: entered promiscuous mode [ 174.131978][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.139437][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.148483][ T5968] bridge_slave_1: entered allmulticast mode [ 174.157235][ T5968] bridge_slave_1: entered promiscuous mode [ 174.178533][ T5899] hsr_slave_0: entered promiscuous mode [ 174.208501][ T5899] hsr_slave_1: entered promiscuous mode [ 174.222397][ T5899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.231154][ T5899] Cannot create hsr debugfs directory [ 174.394991][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.411348][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.646245][ T5968] team0: Port device team_slave_0 added [ 174.699179][ T5857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.718960][ T5857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.835673][ T5968] team0: Port device team_slave_1 added [ 174.925591][ T5857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.970014][ T5857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.015848][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.024591][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.276913][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.352278][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.416129][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.618317][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.983475][ T5097] Bluetooth: hci2: command tx timeout [ 176.055177][ T5968] hsr_slave_0: entered promiscuous mode [ 176.083015][ T5968] hsr_slave_1: entered promiscuous mode [ 176.092290][ T5968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.101216][ T5968] Cannot create hsr debugfs directory [ 176.327497][ T1060] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.485166][ T1060] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.708517][ T1060] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.937532][ T1060] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.072397][ T6061] sp0: Synchronizing with TNC [ 177.078233][ T6064] QAT: failed to copy from user cfg_data. [ 177.394025][ T5899] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.436951][ T5899] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.473296][ T5899] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.588868][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.616781][ T5899] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.829692][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.959475][ T1060] bridge_slave_1: left allmulticast mode [ 177.976910][ T1060] bridge_slave_1: left promiscuous mode [ 177.988118][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.020091][ T1060] bridge_slave_0: left allmulticast mode [ 178.028313][ T1060] bridge_slave_0: left promiscuous mode [ 178.051863][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.942840][ T5097] Bluetooth: hci0: command tx timeout [ 178.952109][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.969221][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.001107][ T1060] bond0 (unregistering): Released all slaves [ 179.149455][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.156744][ T5093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.181123][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.189039][ T5093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.843754][ T1060] hsr_slave_0: left promiscuous mode [ 179.857507][ T1060] hsr_slave_1: left promiscuous mode [ 179.866014][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.878140][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.910118][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.919636][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.974325][ T1060] veth1_macvtap: left promiscuous mode [ 179.980172][ T1060] veth0_macvtap: left promiscuous mode [ 180.001706][ T1060] veth1_vlan: left promiscuous mode [ 180.016484][ T1060] veth0_vlan: left promiscuous mode [ 180.558075][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 180.600505][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 181.081232][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.185019][ T5968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.228078][ T5968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.249857][ T5968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.324656][ T5968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.499559][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.606774][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.225'. [ 181.678483][ T5899] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.767702][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.775007][ T5080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.851360][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.858695][ T5080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.913004][ T5135] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 181.953109][ T6091] netlink: 'syz.0.227': attribute type 20 has an invalid length. [ 182.095323][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.113178][ T5135] usb 3-1: Using ep0 maxpacket: 32 [ 182.122054][ T5135] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 182.160472][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 16384, setting to 64 [ 182.169796][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.187300][ T5135] usb 3-1: config 0 interface 0 has no altsetting 1 [ 182.205852][ T5135] usb 3-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 182.231678][ T5135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.248622][ T5135] usb 3-1: Product: syz [ 182.263579][ T5135] usb 3-1: Manufacturer: syz [ 182.268277][ T5135] usb 3-1: SerialNumber: syz [ 182.309489][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.315355][ T5135] usb 3-1: config 0 descriptor?? [ 182.334076][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 182.340215][ T5135] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 182.378994][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.386329][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.433871][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.441211][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.546892][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.577799][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.614562][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 182.645500][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.667955][ T9] usb 1-1: config 0 descriptor?? [ 182.781745][ T5135] usb 3-1: USB disconnect, device number 10 [ 183.006530][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.164535][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 183.170658][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 183.221975][ T5857] veth0_vlan: entered promiscuous mode [ 183.229387][ T9] usb 1-1: USB disconnect, device number 11 [ 183.281007][ T5857] veth1_vlan: entered promiscuous mode [ 183.319164][ T5899] veth0_vlan: entered promiscuous mode [ 183.416436][ T5899] veth1_vlan: entered promiscuous mode [ 183.438764][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.521566][ T5857] veth0_macvtap: entered promiscuous mode [ 183.542121][ T5857] veth1_macvtap: entered promiscuous mode [ 183.650803][ T5968] veth0_vlan: entered promiscuous mode [ 183.660852][ T5899] veth0_macvtap: entered promiscuous mode [ 183.690574][ T5899] veth1_macvtap: entered promiscuous mode [ 183.711971][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.736149][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.767582][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.788564][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.811393][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.412290][ T5968] veth1_vlan: entered promiscuous mode [ 184.943435][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.982668][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.058262][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.069249][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.095410][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.137932][ T5857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.187294][ T5857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.221739][ T5857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.257441][ T5857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.335564][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.365921][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.400334][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.432743][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.452704][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.476464][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.525039][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.595630][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.645150][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.659972][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.671637][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.695456][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.729528][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.751531][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.807270][ T5899] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.829586][ T5899] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.852743][ T5899] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.862230][ T5899] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.135754][ T5968] veth0_macvtap: entered promiscuous mode [ 186.177595][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.195511][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.263722][ T5968] veth1_macvtap: entered promiscuous mode [ 186.383778][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.398398][ T6150] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 186.407769][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.580347][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.603174][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.611081][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.623480][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.641192][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.705789][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.723920][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.745510][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.768785][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.793025][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.815999][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.853505][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.872709][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.922771][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.952642][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.982749][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.003158][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.038865][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.062048][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.093494][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.234696][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.241800][ T5968] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.266762][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.292689][ T5968] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.301487][ T5968] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.349730][ T5968] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.338678][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.396084][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.444349][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.236'. [ 188.636754][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.662961][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.753324][ T5135] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 188.953224][ T5135] usb 4-1: Using ep0 maxpacket: 32 [ 189.174029][ T5135] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 190.207516][ T5135] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 16384, setting to 64 [ 190.262684][ T5135] usb 4-1: config 0 interface 0 has no altsetting 1 [ 190.286077][ T5135] usb 4-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 190.296109][ T5135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.316841][ T5135] usb 4-1: Product: syz [ 190.324179][ T5135] usb 4-1: Manufacturer: syz [ 190.328859][ T5135] usb 4-1: SerialNumber: syz [ 190.342367][ T5135] usb 4-1: config 0 descriptor?? [ 190.355447][ T5135] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 190.582809][ T5133] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 190.723356][ T5136] usb 4-1: USB disconnect, device number 11 [ 190.825212][ T5133] usb 2-1: Using ep0 maxpacket: 16 [ 190.845991][ T5133] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 190.893259][ T5133] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 190.966133][ T5133] usb 2-1: language id specifier not provided by device, defaulting to English [ 190.988873][ T5133] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.032693][ T5133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.076770][ T5133] usb 2-1: Product: 㰊 [ 191.081065][ T5133] usb 2-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 191.130120][ T5133] usb 2-1: SerialNumber: ఊ [ 191.424444][ T6229] IPVS: Error connecting to the multicast addr [ 191.454583][ T6249] netlink: 'syz.0.246': attribute type 3 has an invalid length. [ 191.467184][ T6250] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0 [ 191.493303][ T5093] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 191.495133][ T5133] cdc_ncm 2-1:1.0: skipping garbage [ 191.534699][ T5133] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 191.582939][ T5133] cdc_ncm 2-1:1.0: bind() failure [ 191.606153][ T5133] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 191.628219][ T5133] cdc_ncm 2-1:1.1: bind() failure [ 191.664350][ T5133] usb 2-1: USB disconnect, device number 11 [ 191.718665][ T5093] usb 3-1: Using ep0 maxpacket: 16 [ 191.747430][ T5093] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.786583][ T5093] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.817220][ T5093] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 191.843147][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.881104][ T5093] usb 3-1: config 0 descriptor?? [ 192.391017][ T5093] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 192.445078][ T5093] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 192.451974][ T5093] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 192.509655][ T5093] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 192.591464][ T5093] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 192.707457][ T5093] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 192.946235][ T5093] usb 3-1: USB disconnect, device number 11 [ 194.962788][ T5180] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 195.185139][ T5180] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 195.204136][ T5180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.231158][ T5180] usb 3-1: config 0 descriptor?? [ 195.506647][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.535585][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.567320][ T5180] usb 3-1: USB disconnect, device number 12 [ 197.413175][ T6313] syz.1.262: attempt to access beyond end of device [ 197.413175][ T6313] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 197.442429][ T6313] SQUASHFS error: Failed to read block 0x0: -5 [ 197.558726][ T6313] unable to read squashfs_super_block [ 197.763553][ T6310] syz.3.261: attempt to access beyond end of device [ 197.763553][ T6310] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 197.818793][ T6310] SQUASHFS error: Failed to read block 0x0: -5 [ 197.851113][ T6310] unable to read squashfs_super_block [ 200.042494][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.057973][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.068127][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.114495][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.124527][ T5088] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 200.134016][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 200.178388][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.192751][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.937585][ T1039] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.957005][ T5140] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 201.199748][ T5140] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 201.254603][ T5140] usb 1-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=39.78 [ 201.286291][ T5140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.328896][ T5140] usb 1-1: Product: syz [ 201.339411][ T5140] usb 1-1: Manufacturer: syz [ 201.364753][ T5140] usb 1-1: SerialNumber: syz [ 201.414218][ T5140] usb 1-1: config 0 descriptor?? [ 201.449807][ T5140] usbtest 1-1:0.0: couldn't get endpoints, -22 [ 201.489544][ T5140] usbtest 1-1:0.0: probe with driver usbtest failed with error -22 [ 201.836780][ T1039] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.227315][ T5133] usb 1-1: USB disconnect, device number 12 [ 202.233711][ T5088] Bluetooth: hci4: command tx timeout [ 202.255787][ T1039] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.369904][ T6338] chnl_net:caif_netlink_parms(): no params data found [ 202.467363][ T1039] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.898368][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.923358][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.960138][ T6338] bridge_slave_0: entered allmulticast mode [ 203.969971][ T6338] bridge_slave_0: entered promiscuous mode [ 204.078862][ T1039] bridge_slave_1: left allmulticast mode [ 204.094823][ T1039] bridge_slave_1: left promiscuous mode [ 204.124506][ T1039] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.212116][ T1039] bridge_slave_0: left allmulticast mode [ 204.240938][ T1039] bridge_slave_0: left promiscuous mode [ 204.289833][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.304597][ T5088] Bluetooth: hci4: command tx timeout [ 205.648037][ T1039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.660304][ T1039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.673721][ T1039] bond0 (unregistering): Released all slaves [ 205.748003][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.767736][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.787739][ T6338] bridge_slave_1: entered allmulticast mode [ 205.796507][ T6338] bridge_slave_1: entered promiscuous mode [ 205.867962][ T5137] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 206.065467][ T5137] usb 3-1: config index 0 descriptor too short (expected 25275, got 18) [ 206.074245][ T5137] usb 3-1: config 42 has too many interfaces: 147, using maximum allowed: 32 [ 206.106034][ T5137] usb 3-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config [ 206.148121][ T5137] usb 3-1: config 42 has 0 interfaces, different from the descriptor's value: 147 [ 206.199356][ T5137] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 206.252613][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.453448][ T4478] Bluetooth: hci4: command tx timeout [ 206.633858][ T6338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.050534][ T6338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.313170][ T6338] team0: Port device team_slave_0 added [ 207.337654][ T1039] hsr_slave_0: left promiscuous mode [ 207.354887][ T5097] Bluetooth: hci1: command 0x0406 tx timeout [ 207.361409][ T5097] Bluetooth: hci3: command 0x0406 tx timeout [ 207.414624][ T1039] hsr_slave_1: left promiscuous mode [ 207.434673][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.473586][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.510000][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.522805][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.570929][ T5137] usb 3-1: string descriptor 0 read error: -32 [ 207.943498][ T1039] veth1_macvtap: left promiscuous mode [ 208.249937][ T1039] veth0_macvtap: left promiscuous mode [ 208.275035][ T1039] veth1_vlan: left promiscuous mode [ 208.504139][ T1039] veth0_vlan: left promiscuous mode [ 208.513721][ T5088] Bluetooth: hci4: command tx timeout [ 209.540593][ T5139] usb 3-1: USB disconnect, device number 13 [ 209.702200][ T6436] syz.2.292 uses obsolete (PF_INET,SOCK_PACKET) [ 210.912467][ T1039] team0 (unregistering): Port device team_slave_1 removed [ 211.035170][ T1039] team0 (unregistering): Port device team_slave_0 removed [ 212.739933][ T6456] ubi: mtd0 is already attached to ubi0 [ 213.975650][ T6338] team0: Port device team_slave_1 added [ 214.229237][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.264413][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.337040][ T6338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.366769][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.391226][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.466343][ T6338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.820014][ T6338] hsr_slave_0: entered promiscuous mode [ 214.831611][ T4478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.844203][ T4478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.853865][ T4478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.862477][ T4478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.874043][ T6338] hsr_slave_1: entered promiscuous mode [ 214.874506][ T4478] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.887957][ T4478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.062811][ T5133] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 215.171065][ T6472] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 215.266507][ T5133] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 215.284875][ T5133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.344918][ T5133] usb 3-1: config 0 descriptor?? [ 216.065673][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.163193][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.247011][ T5133] usb 3-1: USB disconnect, device number 14 [ 217.016220][ T4478] Bluetooth: hci0: command tx timeout [ 217.391686][ T1039] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.752415][ T4478] Bluetooth: hci1: unexpected event for opcode 0x821c [ 217.887890][ T1039] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.962901][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 218.600317][ T1039] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.062342][ T1039] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.111183][ T6514] sp0: Synchronizing with TNC [ 219.117234][ T4478] Bluetooth: hci0: command tx timeout [ 219.127906][ T6518] ubi: mtd0 is already attached to ubi0 [ 220.227941][ T6467] chnl_net:caif_netlink_parms(): no params data found [ 220.384695][ T1039] veth3: left allmulticast mode [ 220.389671][ T1039] veth3: left promiscuous mode [ 220.404702][ T1039] bridge0: port 3(veth3) entered disabled state [ 220.504916][ T1039] bridge_slave_1: left allmulticast mode [ 220.504954][ T1039] bridge_slave_1: left promiscuous mode [ 220.505235][ T1039] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.561994][ T1039] bridge_slave_0: left allmulticast mode [ 220.562034][ T1039] bridge_slave_0: left promiscuous mode [ 220.562318][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.215321][ T4478] Bluetooth: hci0: command 0x040f tx timeout [ 221.642787][ T5180] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 221.851131][ T5180] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.884302][ T5180] usb 4-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=39.78 [ 221.906279][ T5180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.917494][ T5180] usb 4-1: Product: syz [ 221.930863][ T5180] usb 4-1: Manufacturer: syz [ 221.946156][ T5180] usb 4-1: SerialNumber: syz [ 221.994296][ T5180] usb 4-1: config 0 descriptor?? [ 222.011127][ T5180] usbtest 4-1:0.0: couldn't get endpoints, -22 [ 222.034726][ T5180] usbtest 4-1:0.0: probe with driver usbtest failed with error -22 [ 222.131350][ T4478] Bluetooth: hci1: unexpected event for opcode 0x821c [ 223.262739][ T4478] Bluetooth: hci0: command 0x040f tx timeout [ 223.304717][ T1039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.437456][ T1039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.453566][ T6543] syz.1.319: attempt to access beyond end of device [ 223.453566][ T6543] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 223.469908][ T6543] SQUASHFS error: Failed to read block 0x0: -5 [ 223.477606][ T6543] unable to read squashfs_super_block [ 223.519382][ T1039] bond0 (unregistering): Released all slaves [ 223.705628][ T1039] IPVS: stopping backup sync thread 5792 ... [ 223.738432][ T5137] usb 4-1: USB disconnect, device number 12 [ 224.018968][ T6338] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.181681][ T6338] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.474168][ T6467] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.496617][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.506079][ T6467] bridge_slave_0: entered allmulticast mode [ 224.515155][ T6467] bridge_slave_0: entered promiscuous mode [ 224.544992][ T6338] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.647688][ T1039] hsr_slave_0: left promiscuous mode [ 224.666166][ T1039] hsr_slave_1: left promiscuous mode [ 224.698947][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.717141][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.730376][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.739943][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.836908][ T1039] veth1_macvtap: left promiscuous mode [ 224.853439][ T1039] veth0_macvtap: left promiscuous mode [ 224.859235][ T1039] veth1_vlan: left promiscuous mode [ 224.888278][ T1039] veth0_vlan: left promiscuous mode [ 225.362154][ T4478] Bluetooth: hci0: command 0x040f tx timeout [ 225.713119][ T6574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.326'. [ 226.991689][ T1039] team0 (unregistering): Port device team_slave_1 removed [ 227.306929][ T1039] team0 (unregistering): Port device team_slave_0 removed [ 228.093056][ T6467] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.106500][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.121319][ T6467] bridge_slave_1: entered allmulticast mode [ 228.143228][ T6467] bridge_slave_1: entered promiscuous mode [ 228.151908][ T6338] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.371014][ T6467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.929806][ T6467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.960199][ T6467] team0: Port device team_slave_0 added [ 230.035928][ T6467] team0: Port device team_slave_1 added [ 233.003774][ T6604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.334'. [ 233.227015][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.929853][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.036255][ T6467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.103714][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.165437][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.232177][ T6467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.473182][ T5137] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 235.645635][ T6338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.705012][ T6467] hsr_slave_0: entered promiscuous mode [ 235.727527][ T6467] hsr_slave_1: entered promiscuous mode [ 235.751980][ T6467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.781022][ T6467] Cannot create hsr debugfs directory [ 235.873617][ T5137] usb 3-1: Using ep0 maxpacket: 16 [ 235.945943][ T5137] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 235.997612][ T5137] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 236.018418][ T6338] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.043681][ T5137] usb 3-1: language id specifier not provided by device, defaulting to English [ 236.076664][ T5137] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.098942][ T5137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.123223][ T5137] usb 3-1: Product: 㰊 [ 236.150870][ T5137] usb 3-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 236.207385][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.214692][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.242705][ T5137] usb 3-1: SerialNumber: ఊ [ 236.275073][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.282432][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.726968][ T6641] IPVS: Error connecting to the multicast addr [ 237.846266][ T5137] cdc_ncm 3-1:1.0: skipping garbage [ 237.851579][ T5137] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 237.861958][ T5137] cdc_ncm 3-1:1.0: bind() failure [ 237.875561][ T5137] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 237.882522][ T5137] cdc_ncm 3-1:1.1: bind() failure [ 237.934689][ T5137] usb 3-1: USB disconnect, device number 15 [ 238.256671][ T6677] overlayfs: failed to resolve './file0': -2 [ 240.364239][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.385979][ T6338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.407868][ T6467] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.436024][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.445558][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.462915][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.471925][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 240.480355][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.569455][ T6467] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.868985][ T6467] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.222222][ T6467] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 242.061875][ T6467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.444805][ T6467] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.543189][ T4478] Bluetooth: hci3: command tx timeout [ 242.597213][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.604437][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.656401][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.663692][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.731735][ T6693] chnl_net:caif_netlink_parms(): no params data found [ 242.792267][ T6725] syz.2.355: attempt to access beyond end of device [ 242.792267][ T6725] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 242.809481][ T6725] SQUASHFS error: Failed to read block 0x0: -5 [ 242.834675][ T6725] unable to read squashfs_super_block [ 242.849583][ T6338] veth0_vlan: entered promiscuous mode [ 243.172364][ T6338] veth1_vlan: entered promiscuous mode [ 244.369316][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.426011][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.441348][ T6693] bridge_slave_0: entered allmulticast mode [ 244.459512][ T6693] bridge_slave_0: entered promiscuous mode [ 244.481095][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.491381][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.543437][ T6693] bridge_slave_1: entered allmulticast mode [ 244.551317][ T6693] bridge_slave_1: entered promiscuous mode [ 244.612173][ T6749] syz.1.361: attempt to access beyond end of device [ 244.612173][ T6749] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 244.626031][ T4478] Bluetooth: hci3: command tx timeout [ 244.659215][ T6749] SQUASHFS error: Failed to read block 0x0: -5 [ 244.684200][ T6338] veth0_macvtap: entered promiscuous mode [ 244.706048][ T6338] veth1_macvtap: entered promiscuous mode [ 244.714830][ T6749] unable to read squashfs_super_block [ 244.766279][ T6693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.828495][ T6693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.034423][ T6693] team0: Port device team_slave_0 added [ 245.059437][ T6693] team0: Port device team_slave_1 added [ 245.251720][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.267463][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.280866][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.291857][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.321188][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.332420][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.366078][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.380274][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.393489][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.404002][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.424919][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.436523][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.447728][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.461895][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.471163][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.479191][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.506517][ T6693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.522140][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.533800][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.560837][ T6693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.674087][ T6338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.704207][ T6338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.733996][ T6338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.747011][ T6338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.814267][ T6467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.928298][ T6693] hsr_slave_0: entered promiscuous mode [ 245.941086][ T6693] hsr_slave_1: entered promiscuous mode [ 245.950539][ T6693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.966636][ T6693] Cannot create hsr debugfs directory [ 247.164120][ T4478] Bluetooth: hci3: command tx timeout [ 247.541831][ T966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.563161][ T966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.865684][ T6467] veth0_vlan: entered promiscuous mode [ 248.282296][ T6693] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.730810][ T6467] veth1_vlan: entered promiscuous mode [ 248.758666][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.815245][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.831749][ T6693] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.076181][ T6693] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.263454][ T4478] Bluetooth: hci3: command tx timeout [ 249.308723][ T6693] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.343999][ T6467] veth0_macvtap: entered promiscuous mode [ 249.361872][ T6467] veth1_macvtap: entered promiscuous mode [ 249.494135][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.561100][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.615956][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.646355][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.656434][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.668698][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.679128][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.892507][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.164254][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.283358][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.328801][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.360161][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.384658][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.415744][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.451458][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.478449][ T6467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.489066][ T6467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.503917][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.504006][ T5137] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 250.635134][ T6467] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.653822][ T6467] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.680602][ T6467] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.711439][ T6467] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.167698][ T5137] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 252.191182][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.216950][ T5137] usb 5-1: config 0 descriptor?? [ 252.256082][ T5137] cp210x 5-1:0.0: cp210x converter detected [ 252.499814][ T6693] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.545380][ T6693] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.588108][ T6693] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.637797][ T5080] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 252.651412][ T6693] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 252.670679][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.691638][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.715122][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.760716][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.786114][ T5137] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 252.819242][ T5649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.845471][ T5649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.866166][ T5080] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 252.879114][ T5080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.921899][ T6791] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 252.925620][ T5080] usb 3-1: config 0 descriptor?? [ 252.936024][ T6791] netlink: 'syz.4.372': attribute type 2 has an invalid length. [ 252.952886][ T5137] usb 5-1: cp210x converter now attached to ttyUSB0 [ 253.027208][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.058081][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.140706][ T5139] usb 5-1: USB disconnect, device number 7 [ 253.180978][ T5139] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 253.283776][ T5139] cp210x 5-1:0.0: device disconnected [ 253.316716][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.368143][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.418083][ T6693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.497353][ T5080] usb 3-1: USB disconnect, device number 16 [ 253.577660][ T6693] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.633805][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.641096][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.712734][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.719969][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.893007][ T6823] sp0: Synchronizing with TNC [ 254.166930][ T6827] sp1: Synchronizing with TNC [ 254.629783][ T6693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.077806][ T6693] veth0_vlan: entered promiscuous mode [ 256.150616][ T6693] veth1_vlan: entered promiscuous mode [ 257.487086][ T6693] veth0_macvtap: entered promiscuous mode [ 257.547429][ T6693] veth1_macvtap: entered promiscuous mode [ 257.726601][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.767172][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.823137][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.867337][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.898225][ T5240] audit: audit_backlog=65 > audit_backlog_limit=64 [ 257.900069][ T29] audit: type=1400 audit(1719933337.777:4): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6856 comm="syz.4.393" name="newroot" dev="tmpfs" ino=2 [ 257.934489][ T6863] audit: audit_backlog=65 > audit_backlog_limit=64 [ 257.938614][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 257.948305][ C1] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 257.956030][ C1] audit: backlog limit exceeded [ 257.961468][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 257.968155][ C1] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 257.969348][ T6863] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 257.975902][ C1] audit: backlog limit exceeded [ 257.979242][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.022213][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.044391][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.065045][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.075820][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.087645][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.100056][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.111815][ T6859] netlink: 'syz.4.393': attribute type 13 has an invalid length. [ 258.129482][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.175972][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.229541][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.253871][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.283895][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.308984][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.378599][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.427714][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.469453][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.562620][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.637590][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.687515][ T6693] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.763540][ T6693] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.815091][ T6693] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.878069][ T6693] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.361787][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.370646][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.844332][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.066188][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.835897][ T6893] sp0: Synchronizing with TNC [ 261.588107][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.596500][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.902910][ T29] kauditd_printk_skb: 8712 callbacks suppressed [ 262.902926][ T29] audit: type=1400 audit(1719933342.797:7368): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4534 comm="udevd" name="0" dev="sysfs" ino=14728 [ 262.939553][ T4534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 262.952102][ T6923] audit: audit_backlog=65 > audit_backlog_limit=64 [ 262.958275][ T4516] audit: audit_backlog=65 > audit_backlog_limit=64 [ 262.973522][ T6467] audit: audit_backlog=65 > audit_backlog_limit=64 [ 262.980427][ T4516] audit: audit_lost=455 audit_rate_limit=0 audit_backlog_limit=64 [ 262.991210][ T6923] audit: audit_lost=456 audit_rate_limit=0 audit_backlog_limit=64 [ 262.991788][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.005737][ C1] audit: audit_lost=457 audit_rate_limit=0 audit_backlog_limit=64 [ 263.013639][ C1] audit: backlog limit exceeded [ 265.550958][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 265.847606][ T6936] syz.2.414: attempt to access beyond end of device [ 265.847606][ T6936] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 266.279131][ T6936] SQUASHFS error: Failed to read block 0x0: -5 [ 266.298618][ T6936] unable to read squashfs_super_block [ 268.052759][ T29] kauditd_printk_skb: 10241 callbacks suppressed [ 268.052780][ T29] audit: type=1400 audit(1719933347.947:10683): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6967 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 268.082136][ T4534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 268.091574][ T5083] audit: audit_backlog=65 > audit_backlog_limit=64 [ 268.129201][ T6964] audit: audit_backlog=66 > audit_backlog_limit=64 [ 268.136020][ T5968] audit: audit_backlog=66 > audit_backlog_limit=64 [ 268.146509][ T5083] audit: audit_lost=2778 audit_rate_limit=0 audit_backlog_limit=64 [ 268.154829][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 268.161389][ C1] audit: audit_lost=2779 audit_rate_limit=0 audit_backlog_limit=64 [ 268.164377][ T4516] audit: audit_backlog=66 > audit_backlog_limit=64 [ 268.169383][ C1] audit: backlog limit exceeded [ 268.471561][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 268.946408][ T6985] sp0: Synchronizing with TNC [ 271.844776][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 272.713418][ T7017] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 272.724936][ T7017] qnx6: wrong signature (magic) in superblock #1. [ 272.731433][ T7017] qnx6: unable to read the first superblock [ 273.077794][ T29] kauditd_printk_skb: 9825 callbacks suppressed [ 273.077817][ T29] audit: type=1400 audit(1719933352.947:15460): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4534 comm="udevd" path="/sys/devices/virtual/block/loop1/mq/0/cpu1" dev="sysfs" ino=14733 [ 273.080705][ T4534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.088375][ T6467] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.123030][ T4516] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.129868][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.129902][ C1] audit: audit_lost=4481 audit_rate_limit=0 audit_backlog_limit=64 [ 273.129922][ C1] audit: backlog limit exceeded [ 273.130384][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.130404][ C1] audit: audit_lost=4482 audit_rate_limit=0 audit_backlog_limit=64 [ 273.130421][ C1] audit: backlog limit exceeded [ 275.691117][ T7051] sp0: Synchronizing with TNC [ 275.691868][ T4478] Bluetooth: hci1: unexpected event for opcode 0x821c [ 278.658662][ T5083] audit_log_start: 16169 callbacks suppressed [ 278.658684][ T5083] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.662798][ T6338] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.666184][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.671379][ T6338] audit: audit_lost=7912 audit_rate_limit=0 audit_backlog_limit=64 [ 278.671401][ T6338] audit: backlog limit exceeded [ 278.678001][ C1] audit: audit_lost=7913 audit_rate_limit=0 audit_backlog_limit=64 [ 278.678027][ C1] audit: backlog limit exceeded [ 278.678555][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.703021][ T29] audit: type=1400 audit(1719933357.897:21414): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6693 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 278.705533][ C1] audit: audit_lost=7914 audit_rate_limit=0 audit_backlog_limit=64 [ 283.662848][ T29] kauditd_printk_skb: 52686 callbacks suppressed [ 283.662872][ T29] audit: type=1400 audit(1719933363.537:35915): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="*" requested=w pid=6693 comm="syz-executor" path="/10/file0/io.pressure" dev="cgroup2" ino=11 [ 283.689777][ T6338] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.697152][ T5083] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.707006][ T4534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.723150][ T5070] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.723310][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.723336][ C1] audit: audit_lost=20844 audit_rate_limit=0 audit_backlog_limit=64 [ 283.723357][ C1] audit: backlog limit exceeded [ 283.723868][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.730237][ T5070] audit: audit_lost=20845 audit_rate_limit=0 audit_backlog_limit=64 [ 284.476995][ T7100] sp0: Synchronizing with TNC [ 285.651681][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.676414][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.688068][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.698210][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.714027][ T5088] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 285.724091][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.927509][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.305948][ T5088] Bluetooth: hci0: command 0x040f tx timeout [ 286.429981][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.641857][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.963425][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.548142][ T4478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.558905][ T4478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.575886][ T4478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.595021][ T4478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.611403][ T4478] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 287.619326][ T4478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.825944][ T4478] Bluetooth: hci4: command tx timeout [ 288.103220][ T12] bridge_slave_1: left allmulticast mode [ 288.108957][ T12] bridge_slave_1: left promiscuous mode [ 288.163149][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.253176][ T12] bridge_slave_0: left allmulticast mode [ 288.258920][ T12] bridge_slave_0: left promiscuous mode [ 288.305052][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.682038][ T29] kauditd_printk_skb: 34954 callbacks suppressed [ 288.682060][ T29] audit: type=1400 audit(1719933368.567:47943): lsm=SMACK fn=smack_file_open action=granted subject="_" object="*" requested=r pid=5968 comm="syz-executor" path="/71/file0/io.pressure" dev="cgroup2" ino=11 [ 288.713986][ T5968] audit: audit_backlog=65 > audit_backlog_limit=64 [ 288.720589][ T5968] audit: audit_lost=28572 audit_rate_limit=0 audit_backlog_limit=64 [ 288.722774][ T6693] audit: audit_backlog=66 > audit_backlog_limit=64 [ 288.739186][ T5083] audit: audit_backlog=66 > audit_backlog_limit=64 [ 288.746346][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 288.752965][ C1] audit: audit_lost=28573 audit_rate_limit=0 audit_backlog_limit=64 [ 288.761016][ C1] audit: backlog limit exceeded [ 288.768814][ T5968] audit: backlog limit exceeded [ 288.773062][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 289.745943][ T5088] Bluetooth: hci0: command tx timeout [ 289.902865][ T5088] Bluetooth: hci4: command tx timeout [ 289.978864][ T4478] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.990159][ T4478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.001158][ T4478] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.022723][ T4478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.039292][ T4478] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 290.047296][ T4478] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.066802][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.103657][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.119498][ T12] bond0 (unregistering): Released all slaves [ 291.199177][ T7102] chnl_net:caif_netlink_parms(): no params data found [ 291.440486][ T12] hsr_slave_0: left promiscuous mode [ 291.460726][ T12] hsr_slave_1: left promiscuous mode [ 291.477807][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.499292][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.530528][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.544508][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.765281][ T12] veth1_macvtap: left promiscuous mode [ 291.796877][ T12] veth0_macvtap: left promiscuous mode [ 291.804971][ T12] veth1_vlan: left promiscuous mode [ 291.810406][ T12] veth0_vlan: left promiscuous mode [ 291.822843][ T4478] Bluetooth: hci0: command tx timeout [ 291.982812][ T4478] Bluetooth: hci4: command tx timeout [ 292.143372][ T4478] Bluetooth: hci3: command tx timeout [ 292.665933][ T5097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.676408][ T5097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.686990][ T5097] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.704828][ T5097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.738687][ T5097] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 292.747469][ T5097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.078562][ T12] team0 (unregistering): Port device team_slave_1 removed [ 293.132137][ T12] team0 (unregistering): Port device team_slave_0 removed [ 293.712135][ T29] kauditd_printk_skb: 14206 callbacks suppressed [ 293.712157][ T29] audit: type=1400 audit(1719933373.597:58456): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4534 comm="udevd" name="/" dev="sda1" ino=2 [ 293.731050][ T5240] audit: audit_backlog=65 > audit_backlog_limit=64 [ 293.739564][ T29] audit: type=1400 audit(1719933373.597:58457): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4534 comm="udevd" name="/" dev="sysfs" ino=1 [ 293.764743][ T29] audit: type=1400 audit(1719933373.597:58458): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4534 comm="udevd" name="devices" dev="sysfs" ino=4 [ 293.777499][ T4534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 293.784734][ T29] audit: type=1400 audit(1719933373.597:58459): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4534 comm="udevd" name="virtual" dev="sysfs" ino=1342 [ 293.791516][ T4747] audit: audit_backlog=65 > audit_backlog_limit=64 [ 293.809725][ T29] audit: type=1400 audit(1719933373.607:58460): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4534 comm="udevd" name="net" dev="sysfs" ino=3578 [ 293.809793][ T29] audit: type=1400 audit(1719933373.607:58461): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4534 comm="udevd" name="bpq6" dev="sysfs" ino=171364 [ 293.809839][ T29] audit: type=1400 audit(1719933373.607:58462): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4534 comm="udevd" name="uevent" dev="sysfs" ino=171365 [ 293.904010][ T5097] Bluetooth: hci0: command tx timeout [ 294.062774][ T5097] Bluetooth: hci4: command tx timeout [ 294.118638][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.139478][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.150890][ T7102] bridge_slave_0: entered allmulticast mode [ 294.179392][ T7102] bridge_slave_0: entered promiscuous mode [ 294.229364][ T5097] Bluetooth: hci3: command tx timeout [ 294.289630][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.306329][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.343180][ T7102] bridge_slave_1: entered allmulticast mode [ 294.350990][ T7102] bridge_slave_1: entered promiscuous mode [ 294.383805][ T5097] Bluetooth: hci2: command 0x0406 tx timeout [ 294.862774][ T4478] Bluetooth: hci5: command tx timeout [ 295.333417][ T7102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.755644][ T7102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.983097][ T5097] Bluetooth: hci0: command tx timeout [ 296.018460][ T7120] chnl_net:caif_netlink_parms(): no params data found [ 296.067173][ T7105] chnl_net:caif_netlink_parms(): no params data found [ 296.207380][ T7102] team0: Port device team_slave_0 added [ 296.303497][ T5097] Bluetooth: hci3: command tx timeout [ 296.342647][ T7102] team0: Port device team_slave_1 added [ 296.594897][ T7151] chnl_net:caif_netlink_parms(): no params data found [ 296.703827][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.710847][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.740310][ T7102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.755483][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.764840][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.802338][ T7102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.877512][ T7105] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.893219][ T7105] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.900609][ T7105] bridge_slave_0: entered allmulticast mode [ 296.910796][ T7105] bridge_slave_0: entered promiscuous mode [ 296.931800][ T7105] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.949601][ T5097] Bluetooth: hci5: command tx timeout [ 296.955597][ T7105] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.972905][ T7105] bridge_slave_1: entered allmulticast mode [ 296.981005][ T7105] bridge_slave_1: entered promiscuous mode [ 297.220636][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.388992][ T7105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.399743][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.410960][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.418719][ T7120] bridge_slave_0: entered allmulticast mode [ 297.433774][ T7120] bridge_slave_0: entered promiscuous mode [ 297.461101][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.477264][ T7151] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.485681][ T7151] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.493574][ T7151] bridge_slave_0: entered allmulticast mode [ 297.500916][ T7151] bridge_slave_0: entered promiscuous mode [ 297.511500][ T7151] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.519321][ T7151] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.532437][ T7151] bridge_slave_1: entered allmulticast mode [ 297.544365][ T7151] bridge_slave_1: entered promiscuous mode [ 297.571635][ T7105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.598909][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.613282][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.631358][ T7120] bridge_slave_1: entered allmulticast mode [ 297.648983][ T7120] bridge_slave_1: entered promiscuous mode [ 297.716904][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.956417][ T7102] hsr_slave_0: entered promiscuous mode [ 297.994300][ T7102] hsr_slave_1: entered promiscuous mode [ 298.403691][ T5097] Bluetooth: hci3: command tx timeout [ 298.446462][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.717889][ T29] kauditd_printk_skb: 8097 callbacks suppressed [ 298.717942][ T29] audit: type=1400 audit(1719933378.597:64193): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7214 comm="sed" name="/" dev="sda1" ino=2 [ 299.032841][ T5097] Bluetooth: hci5: command tx timeout [ 299.042416][ T7151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.079873][ T7214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.095687][ T7151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.110652][ T5083] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.118336][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.124994][ C1] audit: audit_lost=30609 audit_rate_limit=0 audit_backlog_limit=64 [ 299.132982][ T29] audit: type=1400 audit(1719933378.637:64194): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7214 comm="sed" name="/" dev="sda1" ino=2 [ 299.133040][ T29] audit: type=1400 audit(1719933378.637:64195): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7214 comm="sed" name="lib" dev="sda1" ino=239 [ 299.150766][ C1] audit: backlog limit exceeded [ 299.153681][ T5083] audit: audit_lost=30610 audit_rate_limit=0 audit_backlog_limit=64 [ 299.183689][ T7214] audit: audit_lost=30611 audit_rate_limit=0 audit_backlog_limit=64 [ 299.257544][ T7105] team0: Port device team_slave_0 added [ 299.286271][ T7120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.324676][ T7120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.435063][ T7105] team0: Port device team_slave_1 added [ 299.537048][ T7120] team0: Port device team_slave_0 added [ 299.596600][ T7151] team0: Port device team_slave_0 added [ 299.679128][ T7105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.699398][ T7105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.738405][ T7105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.771556][ T7120] team0: Port device team_slave_1 added [ 299.819303][ T7151] team0: Port device team_slave_1 added [ 299.845655][ T7105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.862683][ T7105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.923185][ T7105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.265015][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.280260][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.325127][ T7151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.360565][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.375872][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.413150][ T7151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.686881][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.728971][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.874694][ T7120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.103394][ T5097] Bluetooth: hci5: command tx timeout [ 301.172162][ T7151] hsr_slave_0: entered promiscuous mode [ 301.186018][ T7151] hsr_slave_1: entered promiscuous mode [ 301.202787][ T7151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.210417][ T7151] Cannot create hsr debugfs directory [ 301.444614][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.511529][ T7105] hsr_slave_0: entered promiscuous mode [ 301.519054][ T7105] hsr_slave_1: entered promiscuous mode [ 301.536368][ T7105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.544184][ T7105] Cannot create hsr debugfs directory [ 301.588961][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.614139][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.621953][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.648052][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.657908][ T7120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.694356][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.814933][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.118225][ T7120] hsr_slave_0: entered promiscuous mode [ 302.125419][ T7120] hsr_slave_1: entered promiscuous mode [ 302.131896][ T7120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.142612][ T7120] Cannot create hsr debugfs directory [ 303.056061][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.156678][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.253477][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.331505][ T7102] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.561796][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.674828][ T7102] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.699771][ T7102] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.716555][ T7102] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.725241][ T29] kauditd_printk_skb: 7723 callbacks suppressed [ 303.725261][ T29] audit: type=1400 audit(1719933383.617:70271): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7245 comm="syz.2.494" name="newroot" dev="tmpfs" ino=2 [ 303.766480][ T29] audit: type=1400 audit(1719933383.627:70272): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7245 comm="syz.2.494" name="/" dev="devtmpfs" ino=1 [ 303.772493][ T5131] audit: audit_backlog=65 > audit_backlog_limit=64 [ 303.784673][ T5240] audit: audit_backlog=65 > audit_backlog_limit=64 [ 303.798809][ T5240] audit: audit_lost=31168 audit_rate_limit=0 audit_backlog_limit=64 [ 303.799045][ T5131] audit: audit_lost=31169 audit_rate_limit=0 audit_backlog_limit=64 [ 303.816274][ T29] audit: type=1400 audit(1719933383.627:70273): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7245 comm="syz.2.494" name="infiniband" dev="devtmpfs" ino=1080 [ 303.841671][ T12] audit: audit_backlog=65 > audit_backlog_limit=64 [ 303.843406][ T5240] audit: backlog limit exceeded [ 303.854612][ T5131] audit: backlog limit exceeded [ 304.226529][ T12] bridge_slave_1: left allmulticast mode [ 304.232305][ T12] bridge_slave_1: left promiscuous mode [ 304.257763][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.294819][ T12] bridge_slave_0: left allmulticast mode [ 304.300549][ T12] bridge_slave_0: left promiscuous mode [ 304.323827][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.349384][ T12] bridge_slave_1: left allmulticast mode [ 304.355325][ T12] bridge_slave_1: left promiscuous mode [ 304.361301][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.385251][ T12] bridge_slave_0: left allmulticast mode [ 304.390989][ T12] bridge_slave_0: left promiscuous mode [ 304.409921][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.441130][ T12] bridge_slave_1: left allmulticast mode [ 304.450289][ T12] bridge_slave_1: left promiscuous mode [ 304.463402][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.486509][ T12] bridge_slave_0: left allmulticast mode [ 304.509181][ T12] bridge_slave_0: left promiscuous mode [ 304.519953][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.163694][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.177147][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.191054][ T12] bond0 (unregistering): Released all slaves [ 306.328320][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.343083][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.355676][ T12] bond0 (unregistering): Released all slaves [ 306.507850][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.520196][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.532045][ T12] bond0 (unregistering): Released all slaves [ 306.985786][ T12] IPVS: stopping backup sync thread 6250 ... [ 307.268592][ T7102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.410774][ T7102] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.573854][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.581158][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.737932][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.745215][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.242433][ T7102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.300938][ T12] hsr_slave_0: left promiscuous mode [ 308.338550][ T12] hsr_slave_1: left promiscuous mode [ 308.352021][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.370686][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.395408][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.404566][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.458866][ T12] hsr_slave_0: left promiscuous mode [ 308.487279][ T12] hsr_slave_1: left promiscuous mode [ 308.500886][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.508670][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.523780][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.531724][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.548131][ T12] hsr_slave_0: left promiscuous mode [ 308.557708][ T12] hsr_slave_1: left promiscuous mode [ 308.573332][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.592786][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.601805][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.623874][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.733035][ T29] kauditd_printk_skb: 6184 callbacks suppressed [ 308.733059][ T29] audit: type=1400 audit(1719933388.617:75965): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7277 comm="sed" name="/" dev="sda1" ino=2 [ 308.775165][ T7277] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.777167][ T12] veth1_macvtap: left promiscuous mode [ 308.781968][ T7277] audit: audit_lost=31336 audit_rate_limit=0 audit_backlog_limit=64 [ 308.796429][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.796460][ C1] audit: audit_lost=31337 audit_rate_limit=0 audit_backlog_limit=64 [ 308.796482][ C1] audit: backlog limit exceeded [ 308.801583][ T12] veth0_macvtap: left promiscuous mode [ 308.805932][ T29] audit: type=1400 audit(1719933388.617:75966): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7277 comm="sed" name="lib" dev="sda1" ino=239 [ 308.824609][ T12] veth1_vlan: left promiscuous mode [ 308.841928][ T7277] audit: backlog limit exceeded [ 308.848729][ T12] veth0_vlan: left promiscuous mode [ 308.858376][ T12] veth1_macvtap: left promiscuous mode [ 308.861347][ T7277] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.864100][ T12] veth0_macvtap: left promiscuous mode [ 308.864320][ T12] veth1_vlan: left promiscuous mode [ 308.874568][ T7277] audit: audit_lost=31338 audit_rate_limit=0 audit_backlog_limit=64 [ 308.889736][ T12] veth0_vlan: left promiscuous mode [ 308.898477][ T12] veth1_macvtap: left promiscuous mode [ 308.905242][ T12] veth0_macvtap: left promiscuous mode [ 308.912079][ T12] veth1_vlan: left promiscuous mode [ 308.932997][ T12] veth0_vlan: left promiscuous mode [ 309.997652][ T12] team0 (unregistering): Port device team_slave_1 removed [ 310.046913][ T12] team0 (unregistering): Port device team_slave_0 removed [ 310.993693][ T12] team0 (unregistering): Port device team_slave_1 removed [ 311.040491][ T12] team0 (unregistering): Port device team_slave_0 removed [ 312.002360][ T12] team0 (unregistering): Port device team_slave_1 removed [ 312.051735][ T12] team0 (unregistering): Port device team_slave_0 removed [ 312.799981][ T7151] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.924661][ T7151] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 313.035139][ T7151] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 313.054697][ T7151] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 313.275066][ T7105] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 313.348691][ T7297] sp0: Synchronizing with TNC [ 313.357265][ T7105] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 313.463313][ T7105] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 313.535712][ T7105] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.745862][ T29] kauditd_printk_skb: 4304 callbacks suppressed [ 313.745886][ T29] audit: type=1400 audit(1719933393.627:79786): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7302 comm="sed" name="/" dev="sda1" ino=2 [ 313.794665][ T7120] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.802460][ T4534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.811069][ T7302] audit: audit_backlog=66 > audit_backlog_limit=64 [ 313.811425][ T5131] audit: audit_backlog=66 > audit_backlog_limit=64 [ 313.831502][ T4534] audit: audit_lost=31503 audit_rate_limit=0 audit_backlog_limit=64 [ 313.846015][ T7120] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 313.846028][ T7302] audit: audit_lost=31504 audit_rate_limit=0 audit_backlog_limit=64 [ 313.846051][ T7302] audit: backlog limit exceeded [ 313.853147][ T5131] audit: audit_lost=31505 audit_rate_limit=0 audit_backlog_limit=64 [ 313.874876][ T5131] audit: backlog limit exceeded [ 313.880879][ T5131] audit: audit_backlog=66 > audit_backlog_limit=64 [ 313.911787][ T7102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.006355][ T7120] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.046654][ T7120] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.208961][ T7151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.450364][ T7151] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.586873][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.594142][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.740286][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.747814][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.871263][ T7105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.263413][ T5097] ================================================================== [ 315.271541][ T5097] BUG: KASAN: slab-use-after-free in hci_cmd_timeout+0x1d9/0x1e0 [ 315.279424][ T5097] Read of size 2 at addr ffff88806f88c8f8 by task kworker/u9:8/5097 [ 315.287447][ T5097] [ 315.289821][ T5097] CPU: 0 PID: 5097 Comm: kworker/u9:8 Not tainted 6.10.0-rc6-syzkaller-00051-g1dfe225e9af5 #0 [ 315.300100][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 315.310205][ T5097] Workqueue: hci0 hci_cmd_timeout [ 315.315317][ T5097] Call Trace: [ 315.318633][ T5097] [ 315.321602][ T5097] dump_stack_lvl+0x241/0x360 [ 315.326346][ T5097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.331687][ T5097] ? __pfx__printk+0x10/0x10 [ 315.336330][ T5097] ? _printk+0xd5/0x120 [ 315.340543][ T5097] ? __virt_addr_valid+0x183/0x520 [ 315.345880][ T5097] ? __virt_addr_valid+0x183/0x520 [ 315.351065][ T5097] print_report+0x169/0x550 [ 315.355719][ T5097] ? __virt_addr_valid+0x183/0x520 [ 315.360895][ T5097] ? __virt_addr_valid+0x183/0x520 [ 315.361268][ T7105] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.366039][ T5097] ? __virt_addr_valid+0x44e/0x520 [ 315.366075][ T5097] ? __phys_addr+0xba/0x170 [ 315.366107][ T5097] ? hci_cmd_timeout+0x1d9/0x1e0 [ 315.366139][ T5097] kasan_report+0x143/0x180 [ 315.366167][ T5097] ? hci_cmd_timeout+0x1d9/0x1e0 [ 315.366202][ T5097] ? process_scheduled_works+0x945/0x1830 [ 315.366226][ T5097] hci_cmd_timeout+0x1d9/0x1e0 [ 315.366266][ T5097] ? process_scheduled_works+0x945/0x1830 [ 315.366290][ T5097] process_scheduled_works+0xa2c/0x1830 [ 315.366333][ T5097] ? __pfx_process_scheduled_works+0x10/0x10 [ 315.366364][ T5097] ? assign_work+0x364/0x3d0 [ 315.366391][ T5097] worker_thread+0x86d/0xd50 [ 315.366422][ T5097] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 315.366462][ T5097] ? __kthread_parkme+0x169/0x1d0 [ 315.366490][ T5097] ? __pfx_worker_thread+0x10/0x10 [ 315.366516][ T5097] kthread+0x2f0/0x390 [ 315.366545][ T5097] ? __pfx_worker_thread+0x10/0x10 [ 315.366570][ T5097] ? __pfx_kthread+0x10/0x10 [ 315.366599][ T5097] ret_from_fork+0x4b/0x80 [ 315.366630][ T5097] ? __pfx_kthread+0x10/0x10 [ 315.366659][ T5097] ret_from_fork_asm+0x1a/0x30 [ 315.366703][ T5097] [ 315.366713][ T5097] [ 315.366718][ T5097] Allocated by task 5097: [ 315.366732][ T5097] kasan_save_track+0x3f/0x80 [ 315.366764][ T5097] __kasan_slab_alloc+0x66/0x80 [ 315.366795][ T5097] kmem_cache_alloc_noprof+0x135/0x2a0 [ 315.366822][ T5097] skb_clone+0x20c/0x390 [ 315.366851][ T5097] hci_cmd_work+0x29e/0x670 [ 315.366880][ T5097] process_scheduled_works+0xa2c/0x1830 [ 315.366901][ T5097] worker_thread+0x86d/0xd50 [ 315.366923][ T5097] kthread+0x2f0/0x390 [ 315.366947][ T5097] ret_from_fork+0x4b/0x80 [ 315.366975][ T5097] ret_from_fork_asm+0x1a/0x30 [ 315.367006][ T5097] [ 315.367011][ T5097] Freed by task 7295: [ 315.367022][ T5097] kasan_save_track+0x3f/0x80 [ 315.367052][ T5097] kasan_save_free_info+0x40/0x50 [ 315.367079][ T5097] poison_slab_object+0xe0/0x150 [ 315.367110][ T5097] __kasan_slab_free+0x37/0x60 [ 315.367142][ T5097] kmem_cache_free+0x145/0x350 [ 315.367169][ T5097] __hci_req_sync+0x62f/0x950 [ 315.367201][ T5097] hci_req_sync+0xa9/0xd0 [ 315.367232][ T5097] hci_inquiry+0x3e1/0x7d0 [ 315.367252][ T5097] sock_do_ioctl+0x158/0x460 [ 315.367290][ T5097] sock_ioctl+0x629/0x8e0 [ 315.367318][ T5097] __se_sys_ioctl+0xfc/0x170 [ 315.367348][ T5097] do_syscall_64+0xf3/0x230 [ 315.367378][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.367409][ T5097] [ 315.367415][ T5097] The buggy address belongs to the object at ffff88806f88c8c0 [ 315.367415][ T5097] which belongs to the cache skbuff_head_cache of size 240 [ 315.367435][ T5097] The buggy address is located 56 bytes inside of [ 315.367435][ T5097] freed 240-byte region [ffff88806f88c8c0, ffff88806f88c9b0) [ 315.367460][ T5097] [ 315.367466][ T5097] The buggy address belongs to the physical page: [ 315.367490][ T5097] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6f88c [ 315.367512][ T5097] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 315.367537][ T5097] page_type: 0xffffefff(slab) [ 315.367558][ T5097] raw: 00fff00000000000 ffff888018e9b780 dead000000000122 0000000000000000 [ 315.367579][ T5097] raw: 0000000000000000 00000000000c000c 00000001ffffefff 0000000000000000 [ 315.680961][ T5097] page dumped because: kasan: bad access detected [ 315.687401][ T5097] page_owner tracks the page as allocated [ 315.693121][ T5097] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 7294, tgid 7294 (dhcpcd-run-hook), ts 313222033497, free_ts 312910156977 [ 315.714274][ T5097] post_alloc_hook+0x1f3/0x230 [ 315.719065][ T5097] get_page_from_freelist+0x2e4c/0x2f10 [ 315.724628][ T5097] __alloc_pages_noprof+0x256/0x6c0 [ 315.729845][ T5097] alloc_slab_page+0x5f/0x120 [ 315.734547][ T5097] allocate_slab+0x5a/0x2f0 [ 315.739083][ T5097] ___slab_alloc+0xcd1/0x14b0 [ 315.743784][ T5097] __slab_alloc+0x58/0xa0 [ 315.748149][ T5097] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 315.754078][ T5097] __alloc_skb+0x1c3/0x440 [ 315.758704][ T5097] audit_log_start+0x186/0xa30 [ 315.763507][ T5097] common_lsm_audit+0xdd/0x1b30 [ 315.768394][ T5097] smack_log+0x421/0x540 [ 315.772747][ T5097] smk_tskacc+0x300/0x370 [ 315.777094][ T5097] smack_inode_permission+0x2dc/0x380 [ 315.782495][ T5097] security_inode_permission+0xa5/0x100 [ 315.788069][ T5097] link_path_walk+0x2ef/0xea0 [ 315.792765][ T5097] page last free pid 7283 tgid 7283 stack trace: [ 315.799193][ T5097] free_unref_folios+0xf12/0x19c0 [ 315.804235][ T5097] folios_put_refs+0x93a/0xa60 [ 315.809024][ T5097] free_pages_and_swap_cache+0x5c8/0x690 [ 315.814685][ T5097] tlb_flush_mmu+0x3a3/0x680 [ 315.819293][ T5097] tlb_finish_mmu+0xd4/0x200 [ 315.823891][ T5097] exit_mmap+0x44f/0xc80 [ 315.828152][ T5097] __mmput+0x115/0x3c0 [ 315.832343][ T5097] exit_mm+0x220/0x310 [ 315.836479][ T5097] do_exit+0x9aa/0x27e0 [ 315.840652][ T5097] do_group_exit+0x207/0x2c0 [ 315.845260][ T5097] __x64_sys_exit_group+0x3f/0x40 [ 315.850297][ T5097] do_syscall_64+0xf3/0x230 [ 315.854817][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.860820][ T5097] [ 315.863151][ T5097] Memory state around the buggy address: [ 315.868788][ T5097] ffff88806f88c780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 315.876866][ T5097] ffff88806f88c800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 315.885424][ T5097] >ffff88806f88c880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 315.893527][ T5097] ^ [ 315.901522][ T5097] ffff88806f88c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 315.909601][ T5097] ffff88806f88c980: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 315.917675][ T5097] ================================================================== [ 315.940902][ T5097] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 315.948155][ T5097] CPU: 0 PID: 5097 Comm: kworker/u9:8 Not tainted 6.10.0-rc6-syzkaller-00051-g1dfe225e9af5 #0 [ 315.958520][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 315.968627][ T5097] Workqueue: hci0 hci_cmd_timeout [ 315.973722][ T5097] Call Trace: [ 315.977040][ T5097] [ 315.980003][ T5097] dump_stack_lvl+0x241/0x360 [ 315.984738][ T5097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.990484][ T5097] ? __pfx__printk+0x10/0x10 [ 315.995132][ T5097] ? preempt_schedule+0xe1/0xf0 [ 316.000026][ T5097] ? vscnprintf+0x5d/0x90 [ 316.004402][ T5097] panic+0x349/0x860 [ 316.008353][ T5097] ? check_panic_on_warn+0x21/0xb0 [ 316.013527][ T5097] ? __pfx_panic+0x10/0x10 [ 316.018007][ T5097] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 316.024085][ T5097] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 316.030476][ T5097] ? print_report+0x502/0x550 [ 316.035215][ T5097] check_panic_on_warn+0x86/0xb0 [ 316.040219][ T5097] ? hci_cmd_timeout+0x1d9/0x1e0 [ 316.045207][ T5097] end_report+0x77/0x160 [ 316.049480][ T5097] kasan_report+0x154/0x180 [ 316.054040][ T5097] ? hci_cmd_timeout+0x1d9/0x1e0 [ 316.059014][ T5097] ? process_scheduled_works+0x945/0x1830 [ 316.064751][ T5097] hci_cmd_timeout+0x1d9/0x1e0 [ 316.069543][ T5097] ? process_scheduled_works+0x945/0x1830 [ 316.075283][ T5097] process_scheduled_works+0xa2c/0x1830 [ 316.080858][ T5097] ? __pfx_process_scheduled_works+0x10/0x10 [ 316.086867][ T5097] ? assign_work+0x364/0x3d0 [ 316.091509][ T5097] worker_thread+0x86d/0xd50 [ 316.096133][ T5097] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 316.102088][ T5097] ? __kthread_parkme+0x169/0x1d0 [ 316.107242][ T5097] ? __pfx_worker_thread+0x10/0x10 [ 316.112430][ T5097] kthread+0x2f0/0x390 [ 316.116518][ T5097] ? __pfx_worker_thread+0x10/0x10 [ 316.121642][ T5097] ? __pfx_kthread+0x10/0x10 [ 316.126255][ T5097] ret_from_fork+0x4b/0x80 [ 316.130686][ T5097] ? __pfx_kthread+0x10/0x10 [ 316.135292][ T5097] ret_from_fork_asm+0x1a/0x30 [ 316.140109][ T5097] [ 316.143505][ T5097] Kernel Offset: disabled [ 316.147870][ T5097] Rebooting in 86400 seconds..